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<htinl> 
<body> 

<a href='littp:/ /hww^t_mary .springfield/dcmograpMcs/98765^ 
ID: 987654321</a><br> 
Date: 13:42 19-May-1996<br> 
Report type: Medication EHspensing 
<bixbr> 

<table border=2 cdlspacing=5> 

<tr><td colspansB alignscenter>Medication Given:</td></tr> 
<tr><td>Penicillin</td><td>10Dmg</td><td>2 capsules</td></tr> 
<tr><td>Tylenol w/Codeire</td><td>200mg</tdxtd>l capsule</td></tr> 
</table> 

<br> ^ 468 

Dispensed by: 

<a href=Tittp://hww^t._0uiry^pringfield/sta£f.directoiy/S.W 
Sam W. Johnston, R2Jx/a>, at 13:42 19-May-1996<br> 

ID Device Serial Numbcn 1265338<br> 
</html> 
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<fonn action=littp://hww.st;_maiy3pnngfieM/medLcatiQn/giv»/9876 
19_May.l996/13: 4r niethod=put> ^ 

<ahref=*littp://h\wjtjnaiy^ringfieW/clcm^^ 

ID: 987654321</a><d>r> ^ ^ „ 

^^^^^ 448 

Report type: Medication Administratian<br> 
Patient ID Veiified: 
<br><d)r> 




<tablc borders2 cellspadng=5> 

<trxtd colspan:53 aIign=centei>Medicatian Given:</td></tr> 



>-456 




<trxtd>Penicillin</td><td>100ing</td><td> 
<select name=Penidllin> 
<option>2 
<optian>15 
<option>l 
<optiQn>05 
<option>nQne 

</select> capsules</td></tr> 

<tr><td>Tylenolw/Codeine</td><td>200mg</td><td> 
<select name=Tylenol_w/Codeine> 
<option>l 
<option>0.5 
<option>none 

</select> capsule</td></tr> 

</table> 
<br> 

464 

Given by: ' 

<a href=littp://hww.st.jnary.springfield/staif_diiectory/M_T ^damsoniitinl**> 
Maiy T. Adamson, ItNx/a>, at: 13:49 19-May-19%<br> 

468 

E>ispensed by: ^ 

<a href=*http://hwwA_inary^pringfidd/sta£f_directory/S_WJc>^^ 

Sam W. Johnston, ILN.</a>, at 13:42 19-May-19%<br> 

<br> 

ID Device Serial Number 1265338^r> 
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REMOTE DAIA COULECTING AND However, over time, as Intranet applications became more 

ADDRESS PROVIDING METHOD AND niunerous and their use as information management tools 

APPARATUS became more widely recognized, single server systems 

could no longer meet the information management needs of 

CROSS-REFERENCE TO RELATED 5 even a single medical facility. This information management 

APPLICATIONS capacity problem has been exacerbated by prolific mergers 

This appUcation is a continuation-in-part application ^ acquisitions among medical groups such that many 

related to the earlier filed patent appUcalion eDtiUed "Secu- medical groups now have several locations and vast amounts 

rity Badgp for Automated Access Control and Secure Data of information to manage. 

Gathering" which was filed on Apr. 14, 1997 and has a Sen 1° To facilitate information management on such a huge 

No. 08/834,634, now U.S. Pat. No. 5,960,085. scale Intranet systems have evolved over time. In most 

cases, so as to increase management capability without 

STATEMENT REGARDING FEDERALLY wasting existing capabiHty (i.e. without completely replac- 

SPONSORED RESEARCH OR DEVELOPMENT ^^^^ ^nd computers), instead of replacing 

Not applicable. entire Intranet systems, additional servers and computers are 

simply added to an existing Intranet netwod^. 

BACKGROUND OF THE INVENTION ^ pj^^^, ^pp^^^^ ,„ j^^^^^^ enhancement 

The present invention relates to computer systems for the minimizes hardware costs, this approach results in an 

management of information distributed across a plurality of extremely complex system wherein it is often relatively 

electronic system devices. More particularly, the invention ^ difiEcult to direct information to Imown electronic memory 

relates to a system which includes a plurality of network locations (i.e. server storage addresses) which are later 

servers, interface terminals, remote data collecting devices easily accessible. While such storage addresses could be 

and other smart devices to facilitate information collection, manually provided, providing such addresses manually is 

approval, editing and storage such that the network server particularly cumbersome as many addresses are complex 

storage location of specific information can be specified ^ and di£5ciilt to ^ecify. This is because a single facility or 

using a remote collecting device. The invention also relates related facilities may employ many different servers and 

to record verification methods. each server may have access to several different memory 

As an initial matter, in the interest of simplifying this devices. Addressing schemes have been further exacerbated 

explanation and unless indicated otherwise, the description by the Internet where there may be several thousand servers 

which follows describes the invention in the context of a and it would be impractical for a user to attempt to manually 

medical facility. However, it should be recognized that the enter every server address used for storage, 

invention should not be so limited and clearly has appUca- To overcome the addressing problem most Intranet serv- 

tioos which are outside a medical facility, only some of ers are equipped to automatically assign server addresses to 

which are specifically discussed hereinafter. specific types of user provided information. To this end, a 

In many industries a need exists for remote information browser is typically loaded onto each Intranet capable 

collection and information storage which facilitates easy computer which conununicates with system servers. When a 

subsequent information retrieval. For example, in medical user contacts a server to interact therewith (i.e. to provide 

facilities there is a need, for purposes of patient protection, information thereto or receive information therefrom), the 

quality control, record keeping, billing, and forensics, to ^ server sends instructions to the browser indicating what 

monitor, control, and record access to medicine should be displayed on the computer screen. Typically the 

dispensation, medicine administration, IVs, blood screen indicates the server which originated the browser 

transfusions, and other treatments as well as the collection, instmctions, includes hyperlinks to various related server 

administration, and testing of blood and tissue samples. addresses, includes some instructions on how to use the 

These events have traditionally been controlled and moni- server via the browser and provides blanks for entering 

tored manually by doctors, nurses and other facility person- information which is to be returned to the server for storage 

nel (hereinafter "physicians" generally). or processing. 

Unfortunately the increasing specialization and complex- In addition the server provides addresses to di^layed 

ity of medical care has vasUy increased both the types and hyperlinks and for information which is to be entered by a 

amount of routine record keeping that is required to track all 50 user. Typically the server provided addresses are held in 

events which occur in a facility. Advantageously, rapid computer memory and not di^layed. After the physician 

growth of computer technologies has provided tools which indicates that information has been entered or selects a 

can be used to store and retrieve sped&c information fi-om hyperlink, the browser software transmits the information to 

a vast quantity of medical records. In particular, Internet the server or contacts the server indicated by the hyperlink 

technology is now routinely used to create hospital Intranets, 55 address. 

link discrete hospital databases and make their data, images. Where information is sent to a server, when the server 

and audio video records commonly accessible. receives information the server may do any of a number of 

Most medical facility Intranet systems include a plurality different things including storing the information at a server 

of network servers di^osed in either one central information address or some type of processing and sending additional 

systems department or at various locations throughout the 60 instructions to the browser. Where a user selects a h>T>erhnk 

facility, a plurality of computer terminals located throughout the server indicated by the hyperlink address responds to the 

the facility and a data bus which finks all of the servers and selection by providing a different set of browser instmctions 

computers together. Software is loaded onto each computer for configuring the browser screen, 

to facilitate information entry and specify server addresses For example, in the hospital environment a first browser 

for information retrieval and storage. 65 screen might di^lay several user selectable hyperUnks for 

The first Intranet systems were used for only very few entering different types of information into the system and 

applications and therefore were not extremely complex. no blanks for entering information. For irsstance, a first 
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hyperlink may be to a pbanoacy server to request a screen own, personalized ^orthand to expedite note taking during 

presentation to enter pharmacy informatioa, a second link patient visits. In addition, often physician's writing styles 

may be to a billing server, a third link may be to a patient are very different making it difficult at best to decipher hand 

history server and a fourth link might be to a prescription written records during data entry. Shorthand and sloppy or 

server. In this case, to enter information the user first has to 5 varying writing styles make data entry by someone other 

select one of the hyperlinks. than a physician extremely difficult. 

When a hyperlink is selected, the server indicated by the Third, when information is entered into a system manu- 
hyperlink address provides instructions to the browser for ally by someone other than a physician, the likelihood of 
configuring the browser screen. For example, a server used mistakes is extremely high due to imperfect translation of 
by a pharmacy may provide instructions to configure a handwritten notes, the fact that entry personnel typically are 
screen including, along with instructions for filling in not trained in medical terminology and the fact that many 
blanks, a first blank for entry of a patient's name, a second medical terms are very similar, thereby increasing the like- 
blank for entry of a physician's name, a third blank for entry lihood that one term may be substituted for another, 
of a dispensed dmg and a quantity indicator and a fourth Fourth, because tolerance for errors in medical records is 
blank for entry of the dispensing date and time. 15 extremely low, there should be some way to fiorce physicians 

After a physician indicates that required information has to check the accuracy of system records prior to allowing 

been provided, the browser trananits the information to the permanent storage. Tlie present server/browser systems do 

pharmacy server. When the server receives the information not require physician approval of records prior to storage. In 

the server stores or processes the information and then other words, in many cases a data entry person may enter a 

typically returns a message indicating that the information ^ physician's notes and the physician may . never check the 

has been stored or processed. notes for accuracy. 

After a pharmacy-record has been stored, when a phar- Fifth, even when someone other than a physician enters 

macist reviews records on the pharmacy server the pharma- information into a system and a physician intends to revisit 

cist can verify, among other things, that a specific prescrip- ^ the information prior to permanent storage to check 

tion was dispensed, the date and time of disusing, which accuracy, despite the importance of record review, because 

patient received the prescription and whidi physician dis- of the press of time, record review by physicians is typically 

pensed the prescription. low on a physician's priority list Where a physician allows 

To enter some other type of information such as billing even a few days to pass prior to reviewing information for 

information, using the first screen, a physician might select ^ approval, a physician's recollection of what transpired dur- 

a second billing server hyperlink. When the second hyper- ing a patient visit may not be accurate and information errors 

link is selected, the billing server provides screen configu- may result. 

ration instmctions and a return target address for informa- Sixth, even v/ber^ a physician takes on the task of entering 

tion to be returned to the server for storage. The browser all information into a system to ensure quality control, the 

displays the billing input screen and waits for the physician task of moving about from one browser screen to another to 

to indicate that information has been provided. Thereafter jnput information vfhich is directed to correct server storage 

the provided information is transmitted to the server at the locations is onerous where many different records have to be 

target address and is either stored or processed. In this entered and stored. For example, a physician may collect 

manner all information addressing and control is facilitated twenty different records while making rounds. Five of the 

by the servers, not the system user. ^ records may have to be stored in patient record's on a patient 

WbUe such information receiving and addressing systems history server, five records may have to be stored on a 

can meet the information gathering needs of some facilities, pharmacy server, five records may have to be stored on a 

such systems have a number of shortcomings. First, infor- billing server and the remaining five records may have to be 

mation gathering and entry into such a system is extremely stored on an inventory server. In this case, the physician 

time consuming and therefore is often thought of as an 45 would have to jump from one browser screen to another 

onerous task which is to be avoided. For example, in a during data entry to enter the twenty records into the system, 

medical facility, when a physician makes her rounds, the While this simple task might not be objectionable where 

physician may visit with twenty or more patients, perform- there arc only a few records, clearly, as the number of 

ing examinations and procedures, diagnosing illnesses and records which a physician is expected to make increase, the 

prescribing and administering drugs. Each visit requires 50 task of jumping among different browser screens becomes 

information gathering related to symptoms, diagnosis, more taxing. 

prescription, procedures and examinations performed and Seventh, in many cases some information may have to be 

drugs prescribed and administered. When this information is provided to many different servers and therefore might have 

gathered via a pen and clip board, the information must later to be entered by a physician or a data entry person more than 

be entered into the system and stored at a specific and 55 qj^^c. For example, where a drug is prescribed for a patient 

accessible location, drug dispensation and administration information may have 

Most physicians are not particularly adept at data entry. In to be provided to many different servers for different pur- 
addition, most physicians arc extremely busy and therefore poses. A pharmacy server may require an administration 
do not have the time to personally enter written information record to ensure that a drug has been delivered, a billing 
into a system via a browser. For these reasons either infer- 60 server may require a record of dispensation for billing 
mation is never entered into a system or a person specifically purposes, a patient record server may have to be updated to 
earmarked for data entry is required. While a data entry indicate that the drug was received, when the drug was 
person may be expensive, the alternative (i.e. not entering received, the quantity of the drug received, the physician 
the information into a searchable form) is not acceptable as who administered the drug and so on, an inventory server 
information must be properly archived. 65 may require an administration record to update an inventory 

Second, even where a data entry person is provided, under list and automatically order drugs to meet anticipated 

the press of time many physician's have developed their requirements, etc. To provide all ofthese records to all of the 
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servers, a physician would have to access four dilTerent Thus, HHDs can be used to eliminate physician's hand 

browser screens, a separate browser screen for each server, written notes thereby streamlining the data gathering/entry 

and duplicative information would have to be entered to be process. In addition, as a physician enters information into 

delivered to each server ^ HHD, the physician can approve entered information 

Eighth, typical systems do not make any record of who 5 ^^^^^^ ^'S^^ "^^^ ^""^ 

approved information entered into a system and therefore .,iiJS?.. f i . i_- 

.J * c *!. • ^ u ■™* While HHD technology goes a long way to solving many 

there IS no way to determme if an authorized physician ^^^^^ assodated with remote inforiiation 

approved a record or some clencal persomiel acadentally ^^ng, problems stfll exist. First, it is likely that physi- 

approved a record before storage. ^ ^^^^^^ ^ ^^^^ ^ manually enter information 

Various electronic devices have been developed to aid in into an HHD for the same reasons that physicians object to 

the information gathering task. One handy information entering information into regular computer terminals. In 

gathering device is the dictation device (DD) which can be addition, with an HHD information entry is even more 

used to record a physician's audio (i.e. voice) notes during objectionable because most HHD keyboards arc relatively 

a patient visit. To this end, a typical DD includes a processor, small. 

a memory (typically an electronic memory), a microphone, Second, patient's will likely object when they perceive 

a speaker and some type of activation button. To take audio that a physician's time during a visit is split between the 

notes a physician positions the activation button in a record patient and an HHD for information entry. This is particu- 

position and speaks into the microphone, the processor larly true in the case where it might be difficult to enter 

recording all voice notes in the memory. DDs often also information into the HHD thereby requiring additional data 

allow audio review of oral notes and re-recording features to ^ entry time. 

correct mistakes. Third, even if there were some quick way to enter 
In facilities where physicians regularly use DDs, recorded information into an HHD, transmission of the information 
notes are provided to data entry personnel who manuaUy from the HHD to a browser and ultimately to a server for 
type audio records into an Intranet computer terminal for ^ storage or processing is a relatively complex ta^. For 
storage on a server. In the alternative, recently some soft- example, assuming five records are stored in an HHD for 
ware has been developed which can automatically convert transmission to a browser and that each of the five records 
audio records into text files for digital storage. is different such that each record ultimately has to be stored 
While DDs are preferred by some physicians, DDs do not on a different server. In this case, prior to transmitting each 
overcome many of the shortcomings of manual (i.e. pen and 30 record to the browser, the physician would have to select the 
paper) record keeping which are discussed above. For proper browser screen for data transmission. For example, if 
example, unless a system includes voice recognition the first record is to be stored on a pharmacy server, the 
software, data entry personnel are still required, physician physician has to select the pharmacy browser screen prior to 
shorthand causes transcription prc^lems for both a data transmitting the first record. After the first record is trans- 
entry person and transcription software, mistakes may be 35 mitted to the browser the browser then provides the record 
made during transcription due to imperfect dicUtion and to the pharmacy server which is associated with the screen, 
complex medical terminology, there is no procedure to Next, assuming the second record is to be stored on the a 
ensure that information accuracy is checked or to indicate billing server, the physician has to select the billing browser 
" who approved information prior to permanent storage and it screen prior to transmitting the second record. After the 
takes a largp amount of time to enter information into the ^ second record is transmitted the browser provides the record 
system. to the billing server. Not only is this process cumbersome. 
Another handy information gathering device is a hand but the HHD would have to have some mechanism which 
held device (HHD) which streamlines the information gath- indicated to the physician which record is queued up for 
ering process and the process of entering information into an transmission so that the physician could select the proper 
Intranet system. To this end, a typical HHD may include a 45 ^^"^^ screen and assoaated server address, 
keyboard or the like, a processor, a memory and a transmit- Fourth, conventional HHDs do not indicate who approved 
ter. The board takes the place of a conventional clip board a record for ultimate storage. 

and is used to manually and remotely enter information Fifth, again, where duplicative information must be pro- 

which the processor stores in the memory. After information vided to several different servers, a physician has to sepa- 

has been entered via an HHD, to provide the information to 50 rately select a browser screen associated with each server 

the system, the HHD trani^itter is positioned in close and transmit the information to be stored once for each 

proximity to a computer input device and the information is server which is to receive the information. TTiis is time 

transmitted to the input device via a message including a consuming and therefore objectionable, 

series of signals. Some HHDs have been designed to facilitate a pseudo- 

To intelligibly receive a transmitted message and provide 55 addressing scheme whereby an ultimate server target 

information contained therein to a browser for ultimate address can be selected for some :^)ecific types of HHD 

delivery to a server for storage or processing, a message information. For example, some HHDs allow a user to enter 

receiving computer must be capable of translating the trans- an E-mail address for a message to be delivered via an 

mitted message into the language used by the server which Intranet or Internet system. 

is typically the hypertext markup language (HTML). This 60 At first bhish an HHD which specifies a pseudo-address 

task is accompUshed in one of two ways. First, the input appears to overcome many of the problems associated with 

device may include special dedicated hardware which con- transferring information from an HHD to a server for 

verts the message into HTML, the hardware resembling a ultimate storage. Thus, if server addresses can be ^}ecified, 

disk drive in the way it interacts with a browser. Second, the a single generic browser screen can be used as an interme- 

inpul device may simply provide the received message to the 65 diary between an HHD and servers, the HHD, not the 

computer processor and software loaded onto the processor servers, ^>ecifying where HHD information should ulti- 

might be designed to translate the message into HTML. mately be delivered for storage or processing. 
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Unfortunately, instead of simplifying the information Document authentication problems are further exaoer- 

management task, pseudo-address specifying HHDs add a bated in the digital realm as document modification and 

new wrinkle of complexity to a browser system. To this end, signature picture cutting and pasting is relatively easy using 

while existing address ^)ecifying HHDs can provide both standard computer functions. Thus, for example, where a 

information (i.e. a message in the case of E-mail) and an 5 document is transmitted from one computer to another and 

ultimate target address, a dedicated "clearing house" server includes some type of signature picture, it would be advan- 

is required for a number of purposes. First, because the HHD tageous to have some way to authenticate the content of the 

cannot specify configuration of a browser screen, a clearing received document. 

hoiise server is required for screen configuration. sohition to this authentication problem is described in 

Second, because Intranet addresses are often extremely lO U.S. Pat. No. 5,689,567 (the "'567 palenfO which is entitled 

complex and difficult to manually specify, to simplify "Electronic Signature Method and ^^paratus," which issued 

address specification, HHD provided addresses usually take on Nov. 18, 1997. In the '567 patent, to enable document 

a short hand form which in and of itself cannot be used by authentication of a digitally stored document which is sub- 

a browser to direct information to a specific server. The short sequently accessed, prior to storing the document, a digital 

hand address is provided to the clearing house server via the 15 signature picture is encrypted as a function of the document 

browser. Thereafter, the clearing house server uses the short content and is further encrypted as a function of a private 

hand address to formulate a more detailed target address (i.e. secret) key. The encrypted signature picture and docu- 

specifying a different server for message delivery. Thus, the ment are stored. 

clearing house server must have some clearing house soft- Thereafter, when the document is reaccessed, the signa- 

ware for processing received information. 20 picture is decrypted using a public key and as a function 

Third, in addition to providing browser screen configu- of the document content thereby generating the document 

ration information, the clearing house server also has to including a signature picture. Where the document is 

specify the clearing house server address so that HHD authentic, the resulting signature picture matches the origi- 

information and the short hand target address are provided Dal signature picture. Authentication is performed by visu- 

to the clearing house server for further distribution. ^ ally comparing the resulting signature picture to the original 

In short, even where an HHD can provide a pseudo- signature picture, 

address for targeting infonnation, a dedicated clearing house While the '567 patent invention is useful, the '567 inven- 

server with special processing software is required. tion has a number of shortcomings- First, after a document 

To appreciate the added wrinkle of complexity in systems ^ is retrieved and decrypted, often it will be useful to store the 

which facilitate pseudo-address specification, consider an document in a more accessible form such as in the form of 

exemplary system including HHDs which can specify a conventional word processor document, spread sheet, etc. 

E-mail messages and associated pseudo-addresses. In this In this case, after the initial decryption, there is essentially 

case, to provide an E-mail message to an Intranet, an HHD no way to subsequently authenticate a document. Thus, for 

user must first select an E-mail browser screen via a com- instance, after a word processor document is generated and 

puter. When the E-mail screen is selected, the computer stored in decrypted or plain text form, the document may not 

communicates with an associated E-mail server which pro- again be accessed for a long time (e.g. years). The next time 

vides information to the browser including screen configu- the document is accessed, because of the passage of time, it 

ration information and the E-mail server address. The may be desirable to re-authenticate. The '567 reference does 

browser thereafter di^lays a properly configured screen for ^ not facilitate re-authentication. 

receiving information firom the HHD. Second, it is often advantageous to generate a hard copy 

Next, the HHD user positions the HHD in close proximity (i.e. paper) of a digital document for more conventional 

to a computer input device and transmits the E-mail storage or conveyance to another party. Again, the '567 

message, including E-mail address, to the browser. The patent facilitates a first authentication by visual comparison 

device provides the message and E-maD address to the 45 but thereafter authentication is impossible. For example, 

browser w\uch in turn transmits the message and E-mail after a paper document with a digital signature picture is 

address to the E-mail server specified by the server address generated, the paper document may be stored in a conven- 

assodated with the screen. When the E-mail server receives tional binder-type file for a long time (e.g. 5 years), 

the message and E-mail address, the E-mail server uses the Thereafter, the paper docuiment may be retrieved for review. 

E-mail address to form a relatively more complex address 5Q When retrieved there is no way to authenticate the docu- 

specifying the target for the E-mail message and then ment. This problem is exacerbated by the fact that many 

transmits the E-mail message to the more complex address documents are copied and copies of documents are copied 

and intended recipient. Clearly this system is more complex and, as with an original paper document which is digitally 

than a typical Intranet system as a dedicated clearing house signed there is no way to authenticate a copy, 

server is required for both screen configuration and addi- 55 Thus, it would be advantageous to have an information 

tional prooessmg. gathering system for remotely gathering information. 

One advantage of conventional paper type reporting sys- reviewing and approving information, identifying who gen- 

tems is that original documents can be authenticated simply crated information and identifying who approved informa- 

via a personal signature. Thus, to determine authenticity an tion prior to storing the information. In addition, it would be 

original document can be located and a signature examined. 60 advantageous if such a system facilitated easy downloading 

Unfortunately, often original documents cannot be located of the information ft^om an information gathering device to 

for authentication. Because copies are easy to manipulate a browser for ultimate transmission to a server for storage or 

(e.g. signature cut and paste and general information processing. Moreover, it would be advantageous if such a 

modification), document copies usually cannot be relied system could be used with a conventional Intranet and did 

upon for verification of their content. Usually, the only 65 not require a dedicated clearing house server or specialized 

reason copies are relied upon is because original documents server software. Furthermore, it would be advantageous to 

cannot be retrieved. have a system which can authenticate either a hard copy or 
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a digitally stored document by simply analyzing infonnation example, in a preferred embodiment the ICD also includes 

provided on the document. physician identifying infomiation in its memory which an 

ICD appends as an additional information segment to infor* 

BRIEF SUMMARY OF THE INVENTION nation units. This feature further reduces the amount of 

The present invention relates to an information gathering 5 manual record keeping required, 

system wherein an information collecting device (ICD) is When an information xmit is assembled by the ICD 

equipped to remotely, automatically and electionically col- processor, the ICD processor provides a complete target 

lect a large portion of the information that a physician may server address for the information unit which is q>pended 

be required to provide during each of several different thereto to form an information packet. The information 

patient visits, information related to each visit forming a to packets are transferred to an Intranet system for review, 

separate information unit. The ICD includes a processor, a approval, modification and eventual storage at the specified 

transceiver and a memory. The ICD is to be used with other target addresses. 

"smart" devices in a medical facility to collect information Intranet system which is suitable for use with the 

which describes facility events. inventive ICD inchides at least one and preferably several 

For example, one smart device may be an IV pump which computer terminals, a plurality of network devices (i.e. 

includes a processor, a memory and a transmitter. Ehiring a memory storage devices or servers) and a network of 

patient's stay in a facility, if the IV pump is connected to the information busses which links the computers to the network 

patient, the pump processor monitors all pump activity devices. An Intranet browser is loaded onto each of the 

including type and amount of fluid dispensed and time of computers. In addition, each computer includes a processor, 

administration. Information collected by the pimip is ^ a memory and some type of input device for receiving 

assembled into an information segment. When a physician information packets from ICDs. 

visits the patient, the pump processor transmits the infor- computer processor receives information packets via 

mation segment to the physician's ICD. the input device from the ICD, identifies the separate packet 

Another smart device may include a medical container sections including the information units and associated 

which includes an electronically locking lid, the hd includes target addresses, and stores associated units and addresses 

a processor, a memory and a transceiver. In one example, a together in the computer memory for subsequent retrieval, 

drug may be dispensed by a facihty pharmacy into the Thereafter, the browser allows a physician to review and 

container. A pharmacy computer provides administration approve each information unit for delivery to a server 

information including the type and amount of drug ^ identified by the target address. The browser may also allow 

dispensed, the patient for whom the drug is dispensed, the a physician to edit information units or reject information 

time period in which the drug should be administered and units. 

perhaps the physicians who arc authorized to administer the When a physician elects to approve an infonnation unit, 

drug. All of the administration information is stored in the f^^, browser sends the approved information unit to the 

container memory. When the container is opened, the con- associated target address (i.e. the target address specified by 

tainer identifies the time and date. The administration infor- jfj^ ICD). 

mation and opening time and date are assembled into an Another object of the invention is to provide an ICD 

information segment. Then, after dmg administration, the ^^^^^ provides server addresses for information units. To 

physician causes die container processor to transmit the ^ inventive ICD can generate server target 

information segmem to the ICD processor for storage m the ^ addresses in any of several different ways. First, the ICD 

processor memory. processor may receive the target address fiom a smart device 

Yet another smart device may include a patient identifi- ibe ICD transceiver. For example, in addition to indi- 
cation bracelet which includes a processor, a memory and a eating the information indicated above, a smart medical 
transmitter. Patient identifying infonnation is stored in the container may also indicate a target address for associated 
bracelet memory as an information segment. When a phy- information segments. For instance, the target address may 
sician visits a patient, the physician causes the identification indicate a pharmacy server address. When the ICD receives 
bracelet to trananit the information segment which identifies target address the ICD appends the target address as a 
the patient. The transmitted information segment is received target address segment to the information unit in the infor- 
by the ICD and stored as part of a collected information unit. mation packet which is thereafter transferred to the browser. 

When several different information segments are received 50 Second, the ICD may receive a command from a user 

by the ICD during a single patient visit, the ICD may indicating a target address. To this end, while target server 

assemble one or several different information units from the addresses are generally too long to manually enter into an 

segments, each infonnation unit including at least one and icD^ where a facility only routinely uses a handful of 

possibly several information segments. servers, the ICD may be programmed so that each distinct 

One object of the invention is to reduce the amount of 55 server address is related to a separate address specifying task 

manual data entry and simplify information management To identifier in the form of an ICD button. For example, where 

this end the inventive ICD facilitates automatic electronic a facility only uses five servers including a pharmacy server, 

retrieval of data gathered by smart devices including diag- a bilUng server, a patient records server, a inventory server 

nostic and monitoring devices, electronic lock-lid and a physician records server, an ICD may be designed to 

containers, IVs, blood samples, etc. Moreover, the ICD may 60 have five separate buttons, each of which are uniquely 

also facilitate automatic patient identification. Furthermore, earmarked to correspond to a server unique address (i.e. 

the ICD processor may provide a time and date stamp button Iconesponds to the pharmacy server address, button 

indicating when an event which is related to an information 2 corre^nds to the billing server address, and so on). Then, 

segment occurred. when an ICD receives an information unit, a physician can 

In addition, the ICD processor may also provide other 65 select one of the five buttons to indicate a desired server to 

information in information segment form which is appended receive the information unit. When a button is selected the 

to other information segments to form information units. For associated server address is specified by the processor as the 
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target address for a constructed information unit, the target 
address forms a target address segment and the target 
address segment is appended to the information unit forming 
the information packet to be provided to the browser. 

Third, the ICD may be able to formidalc a target address 5 
based on information received during information collec- 
tion. To this end, when an information segment is collected, 
the ICD may be equipped to identify the general nature of 
the collected segment from which a proper target address 
can be surmised. For example, all information segments 
received from medical containers may have to be provided 
to a pharmacy server for review by a pharmacist. In this 
case, when an ICD receives an information segment from a 
medical container, the ICD can recognize the received 
information and identify the pharmacy server address as the 
target address. Thereafter, the ICD forms an information unit 
including the information segment from the container and 
perhaps other information (i.e. information from other 
received segments or information generated by the ICD) and 
assembles the information unit and target address into an ^ 
information packet for transfer to the browser. 

As another example, an ICD may be equipped to receive 
dictation when an activation button is pressed. In this case, 
the ICD may automatically identify received audio dictation 
as information to be provided to a transcription pool. Thus, ^ 
the ICD automatically specifies a transcription pool server- 
address so that digitally recorded dictation can be directed to 
a transcription server when downloaded to the Intranet. 

In addition to providing a complete server address to a ^ 
browser, the inventive ICD also provides complete browser 
screen configuration information which is required to con- 
figure a browser screen for di^laying information unit 
information. The configuration information is provided in a 
configuration segment which is appended to the information 
unit and the target address. Hereinafter, unless specified 
otherwise, an information unit will refer to aU information in 
an information packet except the target address segment and 
configuration segment. 

Having an ICD which provides specific target server 40 
addresses and browser configuration information is advan- 
tageous for a number of reasons. First, an address and 
configuration q>ecifying ICD fadhtates easy information 
transmission from the ICD to a browser and ultimately to 
desired servers for storage. Because the inventive ICD 45 
provides server addresses and browser screen configuration 
information, a generic browser can be employed to receive 
any information which is to be transmitted to any server. In 
other words, no information from a server or server pro- 
cessing is required to transmit ICD information units to 50 
target addresses (e.g. no clearing house server is required). 
Thus, any ICD information packet can be provided to a 
generic browser, the browser configuring the screen in 
accordance with the configuration segment information, 
displaying information unit information and storing the 55 
address ^)ecified by the target address segment for ultimate 
delivery of the information unit after approval. In effect, the 
ICD performs all of the front end tasks (i.e. tasks prior to 
permanent information storage) which are typically reserved 
for a browser and eliminates the need for clearing house 50 
processing. 

Second, target address specification can be used to facili- 
tate quahty control. For example, when a drug is dispensed 
into a smart medical container as described above, the 
administration information can be provided by a pharmacy 65 
server (i.e. a specifier apparatus) upon dispensation. Among 
other things, the administration information can specify a 
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target address on the pharmacy server for a subsequent 
information packet describing the administration event 
including time, date, patient, physician administering, 
amount and so on. When the container is opened, the 
container transmits the administration information in the 
form of an information segment to the ICD which assembles 
an information packet including the target address in the 
target address segment. Subsequently the packet is trans- 
mitted to the browser and, after approval, the information 
unit is transmitted to the target address which specifies the 
pharmacy server. 

Advantages related to this loop closure possibility include 
the ability to track drug administration. Because the admin- 
istration information originated with the pharmacy server 
and the information unit was returned to the pharmacy 
server, the pharmacy server can determine if all prescribed 
dmgs and the proper doses have been admirustered at the 
right times to the right patients by authorized physicians. 

Another advantage from loop closure is the ability to 
provide servers whidi automatically generate quality control 
reports. Servers which can close an information loop can be 
programmed to indicate all successful administrations, 
administrations which were not precisely as prescribed (i.e. 
were not during prescribed times, included other than a 
prescribed dose or other than a prescribed dmg, were 
administered by other than an authorized physician, etc.) and 
administrations which were missed. 

According to another a^>ect of the invention is an ICD 
may be progranuned to provide more than one target address 
for a specific information unit. For example, where an 
information unit includes drug administration information, 
the unit may be required by each of a pharmacy, a billing 
department and an inventory department. In this case, when- 
ever an information imit includes drug administration 
information, the ICD provides three target addresses includ- 
ing addresses ^)ecifying each of a pharmacy server, a billing 
server and an inventory server. 

Thus, another object of the invention is to simplify the 
process of providing duplicative information to several 
different servers by enabling specification of several servers 
at one time. 

In all cases the present invention contemplates that, prior 
to transmitting information packets to a browser, a physician 
must first log onto a computer via some procedure which 
identifies the physician and verifies that the physician is 
authorized to enter information packets into the browser or 
is authorized to approve information units prior to perma- 
nent storage. This log on procedure may be as simple as, in 
the case where the physician's ICD includes physician 
identifying information, transmitting the physician identify- 
ing information to a computer terminal via the computer 
input device, the computer processor thereafter performing 
a verification process. In cases where a physician's ICD does 
not include physician identifying information, a more tra- 
ditional log-on procedure may be required wherein the 
physician enters a password which identifies the physician. 
In any case, the invention also contemplates a system 
wherein, when a physician logs onto a computer and trans- 
mits information packets to the computer browser for 
review, editing and approval, after approval, the computer 
includes what amounts to a digital signature in the informa- 
tion unit prior to storage at the target address. The digital 
signature is generated from the log-on in&>rmation and 
identifies the physician who edited and approved the infor- 
mation. 

Thus, another object of the invention is to provide a 
system wherein, prior to storing an information unit on a 
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server, a pbysiciaD reviews the informatioa unit to aifinna- information required to be collected by a physician, allows 

tively determine the accuracy of the unit and assures accu- the physician to record other information which should be 

racy through her digital signature. recorded but is not automatically provided by the system. 

While a digital signature may be relatively simple, taking One other problem with conventional information sys- 

tbe form of a graphical representation of the physician's ^ terns used in hospitals and other facihties which require 

scripted signature (hereinafter **signatiire picture") which is large amounts of remote data gathering is that, besides a 

appended to a document, the present invention also contem- simple password interrogation system, in most cases nothing 

plates a 'Vatermarked" signature picture wherein the water- else stops an unscrupulous person from accessing a facility 

mark varies as a fimction of the content of the document to computer system to exanune, add or modify information 

which the signature picture is appended. This type of water- ^0 stored on the system. In fact, where an authorized person 

marked signature picture facilitates subsequent signature logs onto a terminal and leaves the terminal momentarily, 

picture authentication as well as document authentication. another person could easUy access the terminal and system 

For example, after a document is generated, to check authen- information via the terminal under the guise of the autho- 

ticity the watermark may be examined to, in effect, recreate rized person. 

the document content to determine if the signature picture 15 present invention overcomes this terminal security 

was authentic. problem in several different ways including an identification 

One other object of the invention is to facilitate secure system which ensures that a person who logs onto a system 

digital agnatures which carmot be electronically copied is authorized. To this end, in one embodiment, a person's 

from one document to another without detectioiL This is ICD iiK:ludes some type of body indicia identifier which can 

accomplished by providing document specific watermarked ^ be used to identify an ICD user. For example, the indicia 

signatures. identifier may be a finger print reader which compares a 

Another aspect of the invention allows a browser to store users print to an ICD owners print Where the ICD recog- 

information units on a dedicated server or on a computer nizes a user, the ICD participates in an interrogation by a 

hard drive for later review and approval. In this case, after proximate terminal to gain access to the terminal. Where the 

an information unit is stored, at some later time, a physician ^ ICD fails to recognize the user, the ICD does not participate 

may reacoess the information unit for editing and approval. in an interrogation and therefore access to the network is 

Thus, another object is to facilitate semi-permanent infor- blocked, 

mation unit storage for a reasonable amount of time so that This indicia identifier concept has many applications 

a physician can approve or edit information units when ^ outside the ICD art For example, such an identifier could be 

convenient placed on a credit card. In this case, wb&n a user is identified, 

A related object of the claimed invention is to minimize the card could enable a single charge to be made via the card, 

the amount of training necessary to implement a compre- Thereafter, to make another charge the user would again 

hensive data collection, data security, and data management have to present the user's print to the identifier to authen- 

system for hospital and patient records. The inventive ICD ticate the user. 

and associated system is extremely simple to use for both The inventive identifier has several advantages over prior 

information collection and review. In its simplest form art indicia identification systems. First, because the inven- 

collection amounts to causing smart devices to transmit tive identifier is personal to a single user, the identifier's 
collected information. Transfer to a browser for review - memory need only store finger print characteristics for a 

amounts to causing an ICD to transmit all assembled infor- ^ single user. For this reason minimal memory is required. In 

mation packets. Review amounts to using a single browser addition because only one print has to be interrogated, a 

screen and a few commands to edit and then approve of relatively simple processor can be used to interrogate a 

information units after which units are automatically stored. finger print and identify a user. 

Yet another object is to, where possible, minimize time Second, the inventive identifier keeps personal informa- 

between data collection and data approval to cut down on 45 tion secret while still facilitating user identification. In many 

errors attributable to faulty memory. Even a few days conventional person interrogating systems which identify 

between data collection and approval can cause information body indicia a person's body indicia has to be "given up" to 

errors. To this end, because the inventive ICD system is an interrogation system which is not controlled by the 

simple to use and information downloading is extremely person. For example, to enter a building, an interrogation 

easy, the review and approval procedure is appreciably short 53 system may require a person to place her thumb on a finger 

circuited. print reader which identifies her print characteristic and then 

Another object is to, where possible, provide information compares her characteristic to characteristics of prints asso- 

in a standard format so that virtuaUy all commonly trained ciated with all people who are authorized to enter the 

physicians can glean identical information from gathered facility. In this case the person's print would have previously 

information. To this end, information provided by smart 55 had to have been provided to the system so that a compari- 

devices is always provided in a specific format and is stored son could be made. Providing personal indicia is viewed as 

in a similarly specific format. intrusive by many persons and therefore is objectionable. 

According to another aspect of the invention the ICD may Wiih one embodiment of the inventive indicia identifier, 

be provided with some other type of input device so that a all indicia identification occurs on a device (i.e. ICD, credit 

physician can specify nonstandard information for recorda- 60 card) which is controlled by the device owner at all times 

tion. For example, a physician may identify a new and aiKl therefore control of personal indicia is never forfeited, 

unexpected symptom which ^ould be recorded and which With another embodiment of the invention a person's indicia 

is not indicated by a smart device. In this case, the ICD may is provided to an external interrogation system only for 

include either a small keyboard or a dictation means for interrogation purposes and is thereafter erased ftom the 

entering other information to t>e recorded. 65 systems memory. According to this embodiment, for 

Thus, another object of the invention is to, while provid- example, a person's fingerprint characteristics may be stored 

ing a system which automatically generates much of the in an ICD memory, ^art card or the like. To gain access to 
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a computer Detwork via tenninal an intenDgation must FIG. 4 is a plan view of a hospital patient room equipped 

occur. To this end, an intenogation system includes a with a variety of computerized monitoring, treatment, and 

processor which can receive information £rom the ICD or information devices; 

smart card and which is linked to a print reacter. During an pjG. 5 is a perspective view of a medical container 

interrogating process the person first enables print charac- 5 equ^ped with an electromedianical locking device con- 

teristic transfer from the ICD or card to the processor. Next trolled by communications through transceiver components; 

the person places her thumb on die print reader which pic. 6 is a block diagram of various electrical compo- 

provides prmt characteristics to the processor. Hicreafler the ^^^^ ^-^^ ^ incorporated within an exemplary ICD; 

processor compares the prmts (i.e. from the reader and the „^ ^ . * , , 

ICD or card) and aUc«vs access where the prints are identical lO . FIG.7.sablockdiagr^of a computcr netwoikaccorf- 

but blocks access where the prints are different. Then the ""g.'" °' "^^"^f * P}^'^ f 

pixxxssor erases the prints from memory and may indicate ^^^"^ «i=^ffs fo^ data record retneval and storage 

so for the user's peace of mind. * "^"^ verification system; 

The invention also inchides a method and apparatus for J^^- * P'^"'^ '"^ '=°°'«"'^ ^ 

checking authenticity of a digital or hardcopy document 15 badge, 

using only content provided on the document To this end, PIG- ^ presents the contents of the information transferred 

assuming a document exists in a computer memory and can from a wrist bracelet according to the present invention to a 

be displayed for approval on a computer display. A user may security badge; 

examine the document and, if the user approves the FIG. 10 presents the contents of the information trans- 
document, the user may indicate approval (e.g. via a key or ^ ferred from a medical container according to the present 
icon selection). When approval is given, the computer invention to a security badge; 

performs two tasks. First, the computer provides some form pjo. 11 presents the contents of a digital message record 

of user or personal identifier to the document in a designated incorporating a dictated message and other information 

approval field or space. The identifier may take any of corresponding to the dicUted message; 

several different forms but preferably is a si^ture picture 25 ^ information transferred from a patient 

of the person who approved the document. This first task njonitoring or therapeutic device to a security badge; 

results m a "signed" document. Second, the computer uses fTT^^Tjj c 

the signed document content (i.e. the original document plus ^ ^ representaUon of a URL address of 

thesignaturepicture)andusesapersonalkeywhichbelongs ""^^^f dispensation record fonned m part from the 

to the approver to compute encryption codes, hash code, etc. 30 patient s identification number and a Umc stamp; 

The encryption code is then used to modify a standard water FIG. 13B is a graphical representation of a medical 

mark resulting in a watermark whidi is indicative of the dispensation record with HTML codes for displaying the 

signed document content. The watermark is appended to the information in a network browser, 

signed document. When the document is stored or printed FIG. 13C is a graphical representation of the record of 

out the watermark is included therewith. ^5 piG. 13B as it would be viewed by a system user through a 

Subsequentiy, to authenticate the content and signature of network browser; 

the document, the watermark can be read from the document FIG, 14A is a graphical representation of a medical 

and decrypted using a public key which belongs to the administration record with HTML codes for displaying the 

person whose signature appears on the document information in a network browser; 

(supposedly the original approver). At the end of the decryp- ^ piG. 14B is a graphical representation of the record of 

tion process, the resulting document should match the piG. 14A as it would be viewed by a system user through a 

signed document and can be compared either visually or network browser; 

automatically to authenticate the signature and the document pj^g 15A-15F are a functional flow chart showing the 

content steps a computer terminal executes in logging on a system 

These and other objects, advantages and aspects of the usgj- using a security badge for identification; 

invention will become apparent from the foUowing descrip- pjGs, 16A-16F are a functional flow chart showing the 

tion. In the description, reference is made to the accompa- ^^^^ ^ ^^^^ ^adge executes in logging on to a computer 

nying drawings which form a part hereof, and m which there system, sending data, or signing a document; 

is shown a preferred embodiment of the invention. Such ^^^^^^ ^ ^^^^^^ ^ ^ ^ 

cmbodunent does not necessarily represent the full scope of i_ j * * * ui* u- • *• .t. 

. . . J . • J r . *u 1 • security badge executes m establishmg an association with 

the invention and reference is made therefor, to the claims . . j.n. .-j 

ui^ 111 ^u«yii c.i. \z a paUent and acqumng data from otiier computerized 

herem for interpretmg the scope of the mvention. devices; » r 

BRIEF DESCRIPTION OF THE SEVERAL FIG. 18 is a function flow chart of the steps a security 

VIEWS OF THE DRAWINGS badge follows to record and generate addresses for dictated 

FIG. 1 is a perspective view of a security badge capable me^ages; 

of communicating with computer terminals and a pluraUty 1' » diagram flhistrating the general com- 

of Mnart devices* ponents of a anart device acooroing to the present invention; 

HG. 2 is a perspective view of a wrist bracelet to be worn 60 ^® ^ ^ perspective view of another embodiment of 

bypatientsorotherpersonstoprovideidentificationthrough ^ ^^D accordmg to the present mvenUon; 

wireless communication with security badges or other smart FIG. 21 is a perspective view of a video capable ICD 

device^ according to the present invention; 

FIG. 3 is a plan view of a computer terminal or worksta- FIG. 22 is an exemplary screen view used to implement 

tion being operated by a system user where access is 65 Ihe present invention; 

conditioned upon communications between the security FIG. 23 is a pcrq)ective view of a preferred embodiment 

badge and the computer terminal; of the badge iUustrated in FIG. 1; 
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FIG. 24 is a screen view illustrating ao initial screen information including text aod/or audio and visual data. As 

according to the present invention; illustrated, some patient monitoring devices (i.e. 80) and 

RG. 25 is a flow cbart illustrating a portion of a digital treatment devices (i.e. 116) are hardwire linked to network 

signing process according to the present invention; so that data firom devices 116 and 80 can be provided 

. „ _L ^ lu * *- f J, 1 5 directly to network 190. However, there are other monitor- 

FiG, 26 IS a flow dhart ilh.stratmg a p^^^^^ a digital ^e^ces 80- and treatment devic^ 116' which stand alone 

sigmng process according to the present mvention; ar^ apart from network 190 which, although capable of 

HG. 27 is a portion of an authenticaUon method accord- generating data, are not hardwired to network 190 to fadli- 

ing to the present invention; information interchange. 

HG. 28 is a second portion of an authentication method jo Referring to FIG. 3, an exemplary terminal 60 includes a 

according to the present invenUon; computer 101. a display 103, an interactive device 105 and 

FIG. 29 is a view of an exemplary digital signature an input device 64. Computer 101 includes a processor 107, 

picture; and a raiidom access memory 109 and an audible alarm 111. 

FIG. 30 is a schematic view of an exemplary digitally Processor 107 is linked to memory 109, alarm HI, input 

signed and watermarked document according to the present 15 device 64, display 103, and device 105. In addition, proces- 

invention. sor 107 is linked to network 190 for two-way communica- 
tion with other components of system 194 (see FIG. 7). 

DCTAILED DESCRIPTION OF THE Device 105 is illustrated as a keyboard but could be any of 

INVENTION several different devices including a mouse or other similar 

Ihe present invention may be adapted for use in a wide ^ pointing device, 

variety of applications and is suitable for any environment in A commercially available Internet browser 115 or similar 

which numerous data records having one or multiple forms display, entry and retrieval program using standardized 

and/or formats are to be collected, stored, archived, formatting instructioiB is loaded onto processor 107. For the 

retrieved, or translated. By way of iUustration and not by purpose of simplifying this explanation, while any type of 

way of limitation, unless indicated otherwise, the preferred ^ entry, retrieval and display software may be used to imple- 

embodiment is presented in the context of a medical facility ment the present invention, it will be assumed that browser 

environment in whidi typically there are numerous com- 115 is a standard Internet browser. Generally, browser 115 

puter systems in use by various physicians (e.g. doctors, operates as an interface mechanism between a physician and 

nurses, administrators, etc.) in several related hospitals, and the servers (e.g. 186, 173 . . . ) of system 194. To this end, 

each physician often desires to have access to patient records ^ browser 115 configures various screens on display 103 

created by that physician or by other physicians who prac- providing information such as instructions, hyperlinks and 

tice at one of the related hospitals. Throughout this blanks which facilitate interaction between a physician and 

specification, identical numbers represent similar compo- the servers. Typically, where information is to be provided 

nents and symbols. by a physician (e.g., through selection of a hyperlink or entry 

■^^ via device 105), a target server address for reception of the 

I. Hardware information is provided. 

Referring to FIG. 7, a simplified and exemplary embodi- The target server address will typically take one of two 

ment of a system used with the present invention is illus- basic forms. First, the target address may simply indicate a 

trated as an electronic system referred to as computer ^ data base address on one of data bases 158-162 for storing 

network system 194. System 194 includes a plurality of received information. Second, the target address may 

personal computers or computer tenninals comprising work- specify a specific system 194 server and, when a server 

stations 60 and 60* (designated "Woricstation 1" and "Work- receives information, the server may determine how to 

station M*^, which may be located in patient rooms, at nurse proceed (i.e. process or store the received information), 

stations, in doctor ofBces and administrative ofEces, a plu- Input device 64 is a transceiver which is capable of 

rality of network devices including databases 158 and 162 two-way conmiunication with other devices described bere- 

(designated ''Database 1" and ''Database N**) and servers inafter. While device 64 may be equipped for wired 

including an Admit, Discharge, and Transfer (ADT) system communication, preferably, device 64 is capable of any of 

or server 166, at least one laboratory system or server 170, several different types of wireless communication. Because 

various bedside treatment devices 116 and 116' such as of its low cost, energy efficiency, minimally regulated status, 

ventilators and IV infusion pumps, patient monitoring and standardization by the Infrared Data Association (IrDA), 

devices 80 and 80*, a pharmacy system or server 186, a infrared transmitter and receiver components s^)porting 

security verification system or server 168, a billing system serial infrared communications links comprise the preferred 

or server 171, a patient historical records system or server transceiver 64. A variety of infrared communications 

173 and a imit dose medication di^nser 150. 55 devices, such as Hewlett Packard's HSDHOOl transceiver 

For the most part, system 194 components communicate components, may be used to implement the preferred com- 

with each other via a conmiunication network 190 which munication means. Alternatively, other communication 

may comprise a combination of local and wide area means (e.g. acoustic, radio frequency, or electromagnetic 

networks, using ethemet, serial line, token ring, wireless, or coupling) may be supported. 

other communication ^andards. Communication network Referring to FIGS. 3 and 7, dispenser 150 may take any 

190 may also be arranged so as to be part of the Internet or of several different forms but preferably is a terminal like 

as an individual Intranet The functions performed by the terminal 60 including a processor 107, a browser 115, a 

various components of the preferred embodiment of system memory 101, a specifier transmitter or output device 64, and 

194 may be divided among multiple computer systems or an indicator 111. In addition, other useful functionality is 

consolidated into fewer components. 55 provided by processor 107, for example, timing, counting. 

Each of system servers 186, 166, 173, 168 and 170 has indicator and di^lay control and so on. Dispenser 150 is in 

access to one or more databases 158, 162 for storing conununicalion with pharmacy server 186. Thus, server 186 
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provides screen configuration information as well as server 
target addresses to dispenser 150 for interaction with a 
pharmacist who is re^>0Dsible for disusing drugs. In 
addition to dispensing drugs, dispenser 150 may also dis- 
pense target address information and browser configuration 5 
information to other system devices used for remote infor- 
mation collection and may perform some information track- 
ing tasks described in more detail below. 

In addition to the devices, systems, and servers identified 
above, the inventive system includes a series of other jq 
electronic devices which cooperate to remotely gather infor- 
mation within a medical facility and provide information to 
system 194 for storage and manipulation. 

Referring to FIG. 1, a mobile information coUecting 
device QCD) is illustrated in one embodiment as a security jj 
badge 10 which may be clipped to a physician's clothing or 
worn by chain around a physician's neck. While this 
embodiment implements the invention in the context of an 
identification badge, the invention could be instantiated in 
other shapes, such as a ring, a personalized pointing device ^ 
or a small hand held computer. In keeping with its preferred 
resemblance to a typical identification badge, ICD 10 is 
afiGxed with identification text 12 and graphic di^lay 16. 
ICD 10 incorporates a wireless communication means or 
transceiver 14 (i.e., a receiverAransmitter) which operates as 25 
both a data collector and an output device, an audible 
alerting device 20, an activation button 18, a microphone 
and audio digitizer 22, and a dictation button 26. ICD 10 
may also incorporate additional electronic identification 
means such as a magnetic strip (the general location illus- 3Q 
trated at 30) and may also incorporate a small key pad (not 
illustrated) for entering additional information. 

Referring also to FIG. 6, ICD 10 comprises a processor 
250 which is linked to each of a battery 252, a real-time 
clock 254, a memory element 262, audible alerting device 35 
20, transceiver 14, activation button 18, microphone 22 and 
dictation button 26. Display 16 of ICD 10 may be any of a 
variety of forms, including but not limited to a photograph, 
a light emiiting diode array, a liquid crystal panel, and an 
active-matrix display. In addition, ICD 10 may include a 40 
display 258 such as a light emitting diode array, an LCD 
screen, or a passive or active matrix screen, which is linked 
to processor 250. 

Referring to FIG. 8, exemplary information 300 which 
may be stored in memory element 262 is illustrated. Infor- 45 
mation 300 includes both "base contents" and "optional 
information". The base contents comprises the minimum 
information which should be stored in a personalized ICD 
such as identification ICD 10 and includes a physician's 
password or private/public digital security key information 50 
which can be used to log onto a computer terminal to 
provide information to, or review information thereon. The 
optional information includes other information which is 
descriptive of a badge owner including a user identifier such 
as a name, identification number, occupation, privileges and s5 
so on. 

While personalized ICDs are preferred, the invention also 
contemplates other types of ICDs which are not personalized 
and can therefore be used by any fadUty personnel to collect 
information for entry into a facility computer system. In this 60 
case, however, prior to entering information into the system, 
it is contemplated that a physician would log on to a 
computer terminal in a more conventional manner via sys- 
tem 168 which woiild identify the physician for security 
purposes. For example, the physician might manually enter 65 
a personal identification number to gain access to the 
computer terminal for information entry and retrieval. 
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ICD 10 is to be used with a plurality of difierent "smart 
devices" for remotely collecting information. In addition to 
remotely collecting information, inventive ICD 10 is 
equipped to provide information packets to terminal input 
devices 64 which are formatted aixi addressed according to 
uniform standards in order to minimize the need for human 
intervention in categorizing and archiving patient records. 
Information packets are formatted and addressed according 
to conventions, such as Java or a markup language support- 
ing interactive display by browser 115. While any standard 
format (e.g. HTNtt-, Java . . . ) may be supported and it is 
contemplated that the present invention may be used with 
any computer language format, hereinafter, in the interest of 
simplifying this explanation, the invention will be described 
with reference to the HTML format only. 

By formatting information packets in HTML format a 
receiving computer terminal 60 does not need additional 
programming or input to display or manipulate information 
in an information packet. In a preferred embodiment, for- 
matting and addressing of information packets is done 
partially or entirely by ICD 10 itself, using time stamps, 
patient identification information, and the information or 
contents 300 (FIG. 8) incorporated in memory element 262 
(FIG. 6) of ICD 10. In this manner all the information 
required to display information packet information and to 
send the information to an appropriate database or server is 
included in the information packet transferred fi'om ICD 10. 
An exemplary information packet is described in more detail 
below. 

Referring to FIG. 19, an exemplary smart device 75 
generally includes a processor 77, a memory 79 linked to 
processor 77 aiKl either a transmitter or a transceiver 81 (i.e. 
a receiverAransmitter). In addition, eadi smart device 75 
may also include one or more activation buttons 83, some 
type of indicator (e.g. a light 85 or audible alarm in the form 
of a speaker 87) and a display 88. Smart devices tike device 
75 collect, generate, and/or are provided information whidi 
is assembled into information segments to be transmitted to 
ICD 10 for collection. Many smart devices 75 are contem- 
plated by the present invention, however, in the interest of 
simplifying this explanation, only a small nimiber of smart 
devices are described. Hereinafter when specific smart 
device components are referenced, the specific components 
will be referenced by the same numbers used in FIG. 19 
followed by one or more "'" indicating components asso- 
ciated with ^>ecific devices as described hereinafter. 

Referring now to FIG. 2, one smart device is a patient 
identification bracelet 40. An exemplary bracelet 40 is 
described in U.S. patent application Ser. No. 09/007,290, 
which is entitled "Identification Bracelet With Electronic 
Information", which was filed by the present inventor and is 
incorporated herein by reference. Bracelet 40 includes a 
flexible and extendible band 44, a securing clasp 48, a 
processing device 75 and a wireless communication means 
in the form of transceiver 81'. Bracelet 40 is similar to 
existing bracelets used to identify patients in hospitals, with 
the exception of the processing device 75' which includes 
transceiver 81*. Textual information (not illustrated) is typi- 
cally afExed to band 44. Transceiver 81' is preferably similar 
to transceiver 14 of ICD 10 so that transceivers 81' and 14 
can communicate back and forth. like general device 75 
(see FIG. 19), device 75* includes a processor and a memory 
element linked to the processor (not illustrated). 

Referring also to FIG. 9, exemplary patient identification 
information 320 to be stored in the memory of device 75* is 
illustrated and includes, at a minimum, a patient identifica- 
tion number identifying the patient who wears bracelet 40. 
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In addition, the ideotiiication information 320 may also of information packets from the ICD 10 to the terminal, 

include other descriptive information as indicated. facilitating use of other conventional computing programs 

Referring to FIG. 5, another smart device is a medical (e.g. a word processor, a ^read sheet, Internet access, . . . ). 

container 200. U.S. patent application Ser. No. 08/955,475, In enabling access to any faciUty application, security is 
entitled "System And >^jparanis For Administering Pre- 5 extremely important. 

scribed Medication To A Patient", which was filed by the In the preferred embodiment, authentication, interroga- 

piesent inventor and is incorporated herein by reference, tion and data security will be illustrated through the use of 

describes an exemplary medical container. Exemplary con- conventional "public key" cryptography, such as that imple- 

tainer 200, which may be used to transport and provide mented in RSA, though other well-known techniques for 

auditing and limited access for medications, blood or tissue authenticating a user and securing transmitted data may be 

samples, or other inventory, includes a lid 204, a securing employed. In implementing public key cryptography, the 

latch 232, a latch release button 228, and an electronic security badges and computer terminals are equipped with 

identification or processing device 75". Texmal identifica- "private key rings" of one or more private keys and a "public 

tion 208 may be attached to fid 204. Processing device 75", key ring" of one or more public keys. Depending upon their 

hke general smart device 75 (see FIG. 19) includes a sophistication and the sensitivity of the information they 

processor which is linked to a memory, a battery, a trans- contain, other smart devices in a medical faciUty, such as 

ceiver M\ an activation button 83" and an audible alerting monitoring devices or medical instruments, may also be 

device 87 . , . ^ . equipped with cryptogr^hic means. The private keys of 

Referring also to FIG. 10 exemplary mformaUon 340 ,^ ^ ^^^^^ transmitted or otherwise made 

which might be stored in the niemory assoaaled with accessible outside the ICD 10. For strong compression, each 

processmg deiaoe75"isiUustrated. Once agam Oie mfor- 20 ^vate key would typically be at least 128 bytes 

malion is divided mlo a mmimum amount of mformaUon tu^ f^r ^^^r* 

which should be stored and optional information. In the case ^^^g" ^^^^^^ ^^ fv f^^^. ""Pigmentation for smart card 

of a drug to be administer^, the minimum information f P^^'^^l^^l^,^^ 

inchides medication name and medication quantity. Optional processor (ARM), such as the ARM 6, the ARM 710 or a 
information may include, among other things, die name of a 25 v*"ety of customized chips integrating the ARM 

patient for whom the drug is dispensed, the date and time at technology, such as the Mykromcs Capstone or VLSI's 

which the drug ^ould be administered and the names of VMS 210. A variety of other processors, including the Intel 

physicians authorized to administer the drug. Other infor- x86 processor, would also be suitable, 

mation would be provided in the case of a tissue sample, a FIGS. 15A-15F describe the operation of a computer 
blood sample, etc. 30 terminal 60 (FIG. 3) in interrogating, establishing and moni- 

Referring again to FIG. 5, it is contemplated that latch 232 toring access by a physician wearing an ICD 10 (FIG. 1). 

release may be conditioned on any of a number of different Access is established by providing a substantially unob- 

precise sequences of events. The events may include release structed signal path between the physical wireless commu- 

within a time-window for treatment, the successful nication means 14 (preferably comprising infrared transmit- 

exchange of identification information between a physi- ter and receiver components (see FIG. 1)) of the ICD 10 and 

cian's ICD and processing device 75", the successfiil the wireless transceiver device 64 of the computer terminal 

exchange of identification information between a patient's 5^ establishment of an unobstructed signal path is 

identification bracelet processing device 75' (see FIG 2) and facilitated by having the ICD 10 worn on, or attached to, the 

processing device 75" and the manual depiession of the latch physician attempting to log on the computer 

release button 228. An exainple of a hd unlockmg sequence ^^^^ ^ ^ ^ 

IS de«:nbed m more detad below ^^^^^^ ^^^^^ physician, 

Refemng to FIG. 4, an exemplary patient room 104 . ♦ *u u * • 4i,l 

. , , ^ * / - 1 * • * u J 00 -1 securmg the ICD 10 to the physician minimizes the prob- 

includes a computer terminal 60, a patient bed 88 and .... ?! . .„ . , ^ . l - • 

various other delrices. TTie other devic^ include two smart ^^'^^y ^ ^^l^^.^^ ^^^^'"^^ , 

devices including a patient monitor 80^ and a patient treat- Commencing with FIG. 15A, m step 600 the computer 
ment device 116', each equipped with a wireless transceiver 45 termmal 60 transmits an mterrogation signal, which is 

input device 64 which is similar to transceiver 75* on band fashioned from a private key of the security verificaUon 

40 (see FIG. 2) and transceiver 75" on container 200 (see system 168 (FIG. 7) of the computer network 194, a large 

FIG. 5). Monitor 80 and device 116 are wnart devices random number, and other identificationinformation unique 

meaning that each of those devices typicaUy include the ^ the security verification system 168. Provided a substan- 
components iUustrated in FIG. 19 (i.e. in addition to a so tiaUy unobstructed signal path exists between the wireless 

transceiver, each device includes a processor, a memory, at transceiver device 64 (FIG. 3) of the computer termmal 60 

least one activation button and some type of output device and the wireless communication means 14 (HG. 1) of an 

such as an LED or computer screen for visual indicaUon or ICD 10, the ICD 10 wiU. intercept, process, and be operable 

a speaker for audio indication). In this example, it will be ^ return a part of the interrogation signal m a re-encrypted 
assumed that each of devices 80' and 116* are not hardwii^ 55 form (according to the operation of the ICD 10 set forth m 

to network 194. PIGS. 16A-16F, infra). 

Also shown in FIG. 4 is an optional bedside communi- 1° computer terminal 60 waits for a period 

cation device 96 which is equipped to communicate with sufiBcient to allow an ICD 10 to receive, process, re-encrypt, 

wireless transceiver devices 64. CommunicaUon device 96 and re-transmit the interrogation signal. If 00 return response 

may be connected to an opUonal patient identification dis- is received, in step 608 the computer terminal 60 waits for 

play 100 equipped with wireless transceiver device 64 or to a predetermined period of time and, returning to step 600, 

a patient identification display 120 outside of room 104. transmits another mterrogation signal. If a return response is 

received, in step 612 the format of the return response is 

II. Operation of a Computer Terminal in Access evaluated. If the format is unrecognized, in step 608 the 
^"^I 65 computer terminal 60 waits for a predetermined period of 

Generally, it is contemplated that a terminal used with an time and, returning to step 600, transmits another interro- 

ICD 10 wiU be capable of, in addition to facilitating transfer gation signal. 
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If a return response of a recognized format is received by requiring password entry. More elaborate means, including 

the computer terminal 60, in step 616 it is decrypted or voice identification or a fingerprint or retinal scan, could also 

authenticated using the public key of the ICD 10 whidi be incorporated into the ICD 10 or at computer terminals 60 

returned the response. In a public key cryptographic system, to reinforce such security. One example of a fingerprint 
encryption with a private key uniquely identifies the physi- 5 interrogating ICD and its advanUges is described in detail 

cian possessing that key (assuming the private key has not ^^^w. It is to be expected, however, that should a physician 

been stolen) because an encrypted message can only be ^ (fispc«sessed of an ICD 10, that he or she mirnediately 
decoded using the public key matching the physician's secunty admm^ to deactivate the 

private key. Accordingly, the security verification system pnvileges of the ICD 10. 

168, whidi stores the public keys of each ICD 10 given lO Provided an ICD 10 having access privileges to the 

access privileges to the computer network, attempts to computer teimmal 60 has been identified, m step 624 the 

decrypt the renencrypted interrogation signal using the pub- secunty venficaUon system 168 deternunes whether or not 

lie keys it retains *° require the entry of a password to enable log on by the 

„ ' • t ' t * * • physician. This procedure provides a safeguard should the 

■mere are at least two ways in wbich the decryption ^ unauthorized log on attempts 

procure may be earned out. In one procedure the secunty 15 ^ verification system 168 will 

verification system 168 attempts to decrypt the respo.^ ^^^^^ ^ apprehend the violator. 

Signal, one pubhc key at a time, until either a suocessnil , . - , . 

d^tion is achieved or aU the public keys stored by the P'^^'^ '^'"'^ 'J''-. the corn- 
security verification system 168 fail. Prefeiably, however. {""'^^ •^"""'.^ f? Pf^Pf P^y^f^ » P^,f 
the identification infoimation will have been appended lo the 20 InforriaUon Qiat ,s entered may not only be processed by the 
encrypted portion of the return response purporting to iden- coniputer tenmnal 60, but also transmitted to the ICD 10 m 
tify the lOD 10. Tie security verification system 168 then encrjyted form in order to reset a flag mamtained by t^^^^^^ 
attempts to decrypt the return response using the public key 1» "^^^^ that pas^rf entry .s required. I" step 636 the 
corres^nding to the appended identification information. A Pf^"? " ^ P'^J^ 
succeJsfid d^tion identifies the ICD 10 that originated 25 entered, in step MO a counter ^ mcremented. If the wrong 
the return response. If the decryption is successful, a veri- P^orf was entered less than three <»i^ 
ficaUon algorithm is used to compare the decrypted return MO), the secunty venficaUon sySem 168 returc« to step 
response to the original, pre^ncrypted interrogation signal. again prompts the physicwn to enter the passwor^^^ 
^ & &" jjjj.^ failed attempts (step 640), however, in step 644, the 

It would, of course, be possible to program the computer verification system 168 disables recognition of the 

terminal 60 itself to perform some or all the fimctions of the j^^^^^ ^jt^^p^^ ^ 

security verification system 168. AphysicaUy separate seai- ^^^^^^ ^^^^ administration to alert it to a possible 

nty verification system 168, however, will safeguard the attempted breach of the system. Other processes may be 

computer networicl94's private keys and the hst of pubhc perfonned in the event of a failed interrogation. For 

keys of vahd system users, preventmg appropriation of the example, where data is to be provided to a terminal after a 

keys by one breakmg mto the computer tenmnal 60 itself. successfiil interrogation, the terminal may block reception of 

As an additional precaution, the ICD 10 may be pro- transmitted data after a failed interrogation or series of 

grammed to detect and eject interrogation signals that are intenogatiois. 

short and probabihstically non-random. In other word, if an jf ^^jjin the fiist three attempts, the correct password is 
ICD received one or a series of consecutive interrogation ^ entered, the operation advances to step 648, logging the 

signals which were not recognized as being in a vafid form, physician onto the computer terminal 60 and providing 

the ICD 10 would reject the signal and fail to respond. This access to program features and databases in accordance with 
rejection process would frustrate a cryptanalyst's attempt to 3^^^^ privileges of physician. In step 652, the computer 

derive an ICD lO's private key by interrogating the ICD 10 terminal queries the ICD 10 for the existence of data records 

with short messages and intercepting the re-encrypted to transfer to the computer network 194 and causes the ICD 
response. This precaution is especiaUy justified if the ICD 10 transmit them, if any, to the computer terminal 60 for 

is adapted to communicate with devices and computer database storage, in accordance with the operation detailed 

terminals foreign to the computer network 194 and its ^ pj^s 16A-16F. This query for daU records or informa- 

security verification system 168. This precaution may also tion packets may be automatic or may simply be a function 

limit the damage that could be imposed were a private key ^^^.^ periodically queries for records as described in more 

of the security verification system 168 compromised. detail below. 

In step 620, if the decryption and verification failed to After completion of the data transfer by the ICD 10 to the 

identify an ICD 10 having access privileges lo the computer computer terminal 60 or, in the event no data is transferred 

terminal 60, then the operation proceeds again-to step 608, but another terminal application (e.g. a wordprocessor) is 
where the computer terminal 60 waits for a predetermined 55 employed by the physician, if warranted, the computer 

period of time and, returning to step 600, transmits another terminal 60 will continue lo periodically poll the ICD 10 

interrogation signal. with recommitment signals. These recommitment signals 

Because an ICD 10 may be mi^laced by or stolen from may be specifically addressed to the physician's ICD 10 and 

a physician, additional security measures are warranted. The may incorporate a different random number with cadb 
security verification system 168 may be programmed to 60 polling. Further, these recommitment signals may be 

require that a physician manually enter a password at the encrypted with the ICD lO's pubfic key stored by the 

beginning of each day. Alternatively, the system could security verification system 168, instead of or in addition to 

require manual password entry at random times throughout encryption by the security verification system's private key, 

the day, even while the physician is logged on, flagging so that they may only be intelligibly decrypted by the ICD 
possible theft and unauthorized use of the ICD 10 should the 65 10 itself, using its own exclusively-guarded private key. By 

proper password not be detected. Further, a switch may be periodically polling the ICD 10, the user input and output 

incorporated onto the ICD 10 to force it into a mode devices of the computer terminal 60, including the monitor. 
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keyboard, and mouse, can be disabled if the computer comparing tbe decrypted output with the original recommit- 

tenninal ceases receiving response signals from the ICD 10. ment signal. If tbe decrypted output matches the original 

A physician may also be automatically logged out by means recommitment signal (step 700), then in step 704 the com- 

of periodic polling. puter network 194 reoogoizes that the physician is still using 

Ttus process of periodic polling is illustrated in steps 656 s the computer system. Itie idle^nvalid link counter is reset 

through 65^2 of FIGS. 15C-15E. The computer terminal and the display and other input and output functions of the 

waits for a predetermined interval in step 656, transmits a computer terminal 60, if disabled, are restored. If the 

recommitment signal in step 660, and probes for a response decrypted output docs not match the original recommitment 

signal in step 664. If there is a recommitment response signal (step 700), then in step 708 the computer network 15M 

signal, in step 668 its content is evaluated. If the content of recognizes that another physician is nearby. If the value of 

the recommitment refuse signal is accepted, the operation ^jj^ idle/invalid link counter exceeds a third limit (step 712), 

proceeds to step 696, discussed infra. If either there is no ^^j^ original physician is logged off. memory cache and 

recommitment response signal in step 664, or if the content temporary work space utilized by the original physician or 

of the recommitment response signal is rejected in step 668, applications executed by or through the original physician is 

an idle/invalid link counter (not ilhistrated) maintained by deleted and/or overwritten, and the new physician is logged 

the security verification system 168 and whose initial vahie ^ ^he computer terminal. If the vahie of the idle^nvalid 

relative to the log on event was zero, is incremented in step y^j^ counter has not yet exceeded a third limit (step 712), 

^^2. then the new physician is reoognizsed but not logged onto the 

The idle/invalid link counter permits the physician to terminal, for the original system user has not been logged off 

temporarily turn away fi-om the transceiver device 64 of tbe 20 for a su^dent period of time. 

computer terminal 60 or to otherwise interfere with the y^^^ ^ preferred embodiment is described above 

signal path. However, if the computer tennmal 60 does not ^^^^^^ ^ ^^^^^^ -^-^^^ ^ interrogation process, the 

receive a recommitment response signal after several invention is not meant to be so limited and indeed inchides 

requests, the di^lay of the computer terminal 60 is blanked, ^^^^ ^^^^^^ ^ -^^^^^ ^ interrogation either 

input from any keyboard or pomtmg device may be ignored, 25 ^hen an ICD is near a terminal (e.g. in the case where an 

and other processing activities may be suspended. The u-ansmits interrogation signals at regular and Sequent 

computer terminal 60, however, continues to transrnit intervals) or vsdien an initiation button is jessed on the ICD. 
recommitment signals. Should the physician s ICD 10 

respond within a second period of time, the display will be m Operation of an ICD in Access Control 

restored to its previous condition and the keyboard, pointing 30 

device, and processor will resume normal operation. If the FIGS. 16A-16F describe the operation of an ICD 10 

ICD 10, however, does not transmit a correct recommitment (FIG. 1) in responding to interrogation and recommitment 

response signal during the second period of time, the phy- signals transmitted by a proximately located computer ter- 

sician is automatically logged off the computer network 194. minal 60 (FIG. 3). In order to conserve power, the ICD 10 

When the user is logged off the computer system, a software 35 is preferably capable of alternating between sleep and wake 

piDgram may also be used to remove any temporary files that states. During a sleep sUte, the ICD 10 is not responsive to 

have been stored on disk or in RAM memory, e.g. the cache signals transmitted by computer terminals 60 and other 

file used by the network browser program. Furthermore, proximate smart devices, and may be essentially "invisible" 

access by the computer terminal 60 to the computer network to such devices. This alternating sleep/wake cycle is 

194 may be terminated with the exception of the link 40 described in steps 724 through 732. In step 724, the ICD 10 

between the computer terminal 60 and the security vcrifi- maintains a wake state in which it is capable of receiving and 

cation system 168, which may be preserved to determine if transmitting signals through its wireless communication 

a new user is attempting to use tbe computer terminal 60 to means 14. If in step 728, the time alloUed for the wake state 

log onto the computer network 194. In this manner a has expired and no signal has been received via the wireless 

physician's access to the computer network 194 is restricted 45 communication means 14 of the ICD 10, then in step 732 the 

while logged off and enlarged while logged on. ICD is powered down for the allotted duration of its sleep 

This computer terminal access security operation is state, before cycling back to the wake sUte of step 724. 

described more particularly in steps 676 through 692 of If a signal is received during its wake state, however, the 

FIGS. 15D-15E. The value of the idle/invalid link coimter is alternating sleep and wake-cycle is suspended in order to 

compared in step 676 to a predetermined disable I/O limit. 50 process and respond to the signal. In step 736, the ICD 10 

If that value does not exceed the disable I/O limit, the processes and identifies the signal. If the signal is identified 

periodic polling continues with step 656. If and when the as a nonspecifically addressed signal (step 740) or as being 

value of the idle/invalid link counter does exceed the disable addressed to the instant ICD 10 processing the signal (step 

I/O limit, in step 684, the input and output devices of the 742), then further evaluation of the signal is performed, 

computer terminal 60 are disabled, if they have not been 55 beginning with step 760, discussed infira. 

previously disabled (step 680). In step 688, tbe value of the A signal that is neither nonspecifically addressed (step 

idle/invalid link counter is compared to a predetermined 740) nor ^ecifically addressed (step 742) to the instant ICD 

logout limit Periodic polling is continued in step 656 if the 10 is regarded as being extrinsically addressed to a second 

value of the idleAnvalid link counter does not exceed the ICD 10. This situation may arise when two system users 68 

logout limit. If and when this value is exceeded, in step 692 60 with two security badges 10 are in the vicinity of the same 

the physician is logged off the computer terminal 60 and computer terminal 60, one of them being logged onto the 

information stored in memory or cache on the computer computer terminal 60. In step 744, the extrinsically 

terminal by tbe user is overwritten. addressed signal is evaluated to determine whether or not it 

If the content of the recommitment response signal is is of a nature seeking an identification signal from the 

vaUd (step 668), in step 696 tbe security verification system 65 second ICD 10. If not, the instant ICD 10 ignores the 

168 processes the signal through a verification algorithm, extrinsically addressed signal and retires to wake state 724. 

attempting to decrypt the signal with public keys and If, however, the extrinsically addressed signal is of a nature 
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requesdng an identiOcatioD sigoal, in step 752 the instant aiEnnative agreement and action of the physician. If in step 

ICb 10 pauses to pennit the second ICD 10 to trananit its 812, the activation button 18 had been depressed within the 

identification signal. In step 756, the ICD 10 then transmits limited time period, in step 820 the document, a message 

its own identification signal to the computer terminal 60 to digest or an information packet is encrypted in whole or in 

indicate its presence, retiring afterward to wake state 724. 5 part and transmitted to the computer terminal 60, the ICD 10 

This may allow the security verification system 168 to afterward retiring to wake sUte 724. 

temporarily blank the screen to prevent unauthorized access „, . . -n *_ * j .u *• u»»*^« 10 

^ TZ . ^ I. • u *L - -1 r Though rjot illustrated, the activation button 18 may be 

to data by one physician through the access privileges of TV 1 j • j * ^ . 

.u 1 • * Au *: 1 • A p ■i.ZL^ K„ pressed for several seconds m order to suspend automatic 

another physician. Alternatively, after repeated failures by f . . ^-'^ . . . . 

the computer terminal 60 to receive a re^ionse signal from on access to a computer tergal 60 without bemg 

the second ICD 10, the second physidanTay be lagged P™,°»P^ '^'f /Tlw ^ ^ 1 ^"^^ 

and the instant physician logged L. ^'^^J'd^'^'^ ^ "''^'^^^ automatic log on has been 

In the event that the signal was either non^>ecifically s"spc . 

addressed (step 740) or specifically addressed to the instant 1° ^dchUon, while the preferred embodmient is described 

ICD 10(step742),theoperationadvancestostep760, where ^5 above wherem a termmal imtiates an mterrogation process, 

the signal is further evahiated to determine whether it is an ^ possible m other embodiments to imtiate an 

interrogation or recommitment signal, in which case it mterrogation via the ICD either every time an ICD is 

would have been encrypted by a private key of the security proxunate a termmal or when an earmarked ICD button is 

verification system 168. If in step 760 it is identified as an pressed. 

interrogation or recommitment signal, then in step 764, a 20 jy Browser Initiation 
key ID tag appended to the signal is used to locate the public 

key stored in the memory element 262 (FIG. 6) of the ICD It is contemplated that the inventive ICD/smart device 

10, with which it decrypts the signal. system will be used with conventional computer teraiinal 

In step 768, the decrypted signal is evaluated for infor- hardware which can be employed to run other usefiil soft- 

mation positively or probabilistically identifying the secu- 25 programs. To this end, when a physician nears a 

rity verification system 168 as the source ofthe signal. This terminal and the terminal and the physician's ICD 10 

step implements the precaution ofprogramming the ICD 10 perform an interrogation, the physician will simply be 

to detect and reject interrogation signals that are too short or lagged onto the terminal and ICD information packets may 

probabilistically non-random. If the decrypted signal is not or ^ay not be automaticaUy transferred to the terminal, 

distinguishable as originating from the security verification 30 dependmg on how the terminal is configured. In a preferred 

system 168, then in step 772, the ICD 10 stores and transmits embodiment, after a successfiil interrogation, a termmal 

an invaUd message code, retiring to wake state 724. If the automatically quenes an ICD 10 to retrieve information 

decrypted signal is recognized as originating from the secu- packets for display. In another embodiment, after a suocess- 

rity verification system 168 (step 768), then in step 774, the ^ interrogation, a physician is given the option to use any 

signal or a portion thereof is re-encrypted using the private 35 terminal capabilities whidi the physician is authorized to 

key of the ICD 10 and transmitted, in step 776, to the ^se. For example, m addition to downloading information 

computer terminal 60. FoUowing this transmission, the ICD fro™ the physician's ICD to the termmal, the physician may 

10 retires to wake state 724 to use a wordprocessor or a spreadsheet, access the 

TlLraing back to step 760, if the signal is not identified as Internet, access e-mail and so on. In this embodiment, upon 

an interrogation^r recommitment signal, in step 784 the 40 ^^^S. a termmal, the physician is given the opUon to 

signal is evaluated to determine whether it is prompting the ^^^^ fy different aj^lications. Instead of auto- 

ICD 10 to transmit stored data to the computer terminal 60, maUcally querying an ICD 10 for informaUon packets to 

in which case in step 788 the data is transmitted before the transmit padeets, a physiaan must press activaUon button 18 

ICD 10 retires to wake state 724. If the signal was not 1) ^^^^ P°i°^ P^*^^»^ transmitted, 

identified as a prompt for data transfer (step 784), then in 45 1° either of the above embodiments (i.e. automatic and 

step 794 the signal is evaluated to determine whether it is manual packet transfer), when not using a terminal to 

prompting the ICD 10 to delete specified data, in which case display packet information, the terminal must be useable for 

in step 796 the specified data is deleted before the ICD 10 other applications. 

retires to wake state 724. To enable a terminal to facilitate various applications and 

If the signal was not identified as a request to delete 50 still be ready to receive ICD 10 data, preferably, a q?lit 

specified daU (step 792), then in step 800, the signal is saeen is maintained by the terminal. Referring to FIG. 22, 

evaluated to determine whether it is prompting the ICD 10 an exemplary ^lit screen 523 is illustrated. Screen 523 

to digitally sign a document or data record using its private inchides an upper window 525 and a lower window 527. 

key. If the signal is not identified as a request to digiully sign Although illustrated as relatively large, in reality, lower 

a document, the signal is treated as an unspecified command, 55 window 527 is extremely small (e.g. a single line) so that a 

upon which the ICD 10 takes no action, instead retiring to selected application can take essentially full advantage of 

wake state 724. If the signal is identified as requesting a entire screen area 523. Generally, a selected application (e.g. 

digital signature (step 800), in step 804 the computer ter- a word processor) runs in window 525. 

minal 60 or the ICD 10, by means of its audible alerting Exemplary HTML code for controlling window 525 is 

device 20, prompts the physician to depress the activation 60 indicated in box 901. Lines 903 and 905 indicate that the 

button 18. In step 808 the ICD 10 waits for the physician to information from www.abc.com and from address 

respond for a limited time period. In step 812, if the I:swap.htm, respectively, should be displayed in windows 

activation button 18 has not been depressed before the 525 and 527, respectively, wherein "I" corresponds to the 

expiration of this limited time period, then in step 816 the address location associated with the input device and acts as 

ICD 10 returns a signal indicating that the signature has not 65 a device similar to a disk drive. In window 527 code segment 

been provided, retiring then to wake state 724. In this 529 is provided at a time 1 prior to information being 

manner a digital signature will not be provided without the provided at address I:swap.htm, Segment 529 includes a 
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"Refresh" oommand 907 and a oommand ''uil-Lswap.htm". At any lime while the physician maintains access to the 

Refresh command 907 indicates that window 527 should be terminal, the physician may press button 18 to transmit 

refreshed periodically (e.g. every 3 seconds) with data stored information packets to the terminal. When button 18 is 

at address I:swap.btm. Where no data is stored at address pressed, packets are sequentially stored to and at l:swap.htm 

I:swap.htm, window 527 remains relatively small (e.g. a 5 and then provided to the terminal. Upon the next refinesh 

single line at the bottom of the screen). However, upon a ^yclc (e.g. 3 seconds), an initial screen (see FIG. 23) 

refresh cycle, when information has been provided at characterizing the packets and providing options is pro- 

I:swap.htm, window 527 is automatically expanded such vided 
that the information can be displayed therein. 

When an information packet is received from an ICD 10, y Interrogating ICD 
either through automatic query or pressing button 18, the 

packet is stored at I:swap.hUn which emulates a disk drive Referring now to FIGS. 1 and 23, a preferred embodmient 

and segment 529 is the code sample in the file. of the ICD badge 10 is identified as ICD 401. ICD 401 is 

Thus, after an ICD 10 first establishes communication essentially identical to ICD 10 (FIG. 1) having the same 

with a terminal, until information packet transmission to the internal components, an alarm indicator, a ^aker, an audio 

terminal, a physician can use any of several different termi- digitizer, a transceiver, a visual indicator (e.g. picture, text, 

nal applications in window 525. However, once an infor- etc.) and so on. However, ICD 401 is different than ICD 10 

mation packet is received, code line 909 expand and refresh in that the activation mechanism is different 

window 527 with a screen which is configured via the piQ 23 is a perspective view of ICD 401 showing, 

received information packets. generally, the back side of ICD 401, the front side of ICD 

For example, assume a physician's ICD 10 includes three 20 appearing as illustrated in FIG. 1. Instead of having a 

patient information packets which the physician is to review conventional activation button (26 in FIG. 1), ICD 401 

via a terminal. Prior to receiving the packets, however, the includes an interrogating activation button 403 which 

physician would like to review data on ABC GorporaUon ^^^^^ ^ ^ ^-^^ approximately the 

which is accessible via the Internet. When the phyaaan is ^ Pad 405 is capable of discerning the 

proxmiate a termmal, the temimal and ICD 10 perfonn an 25 characteristics of a fingerprint when a thumb is pressed 

mterrogation process and, after a suocessnil mterrogation, . . * r j* • n • * u 

the terminal allows the physician to access the termkal. In ^™ systems for dis<xmmg fingerpnnt charac- 

the fiist embodiment (i.e. automatic packet query), the input ^"f ^^ave been provided m the pnor art and therefore 

device automatically retrieves the ten packets from the ICD ^ ^ explained here m detail. Suffice it to say that any 

10 and stores the packets on disk address I. The next time 30 method for discemmg characteristics may be used here 

(e.g. within 3 seconds) screen 532 is refreshed, the browser which can be implemented in a relatively small electronic 

displays a screen configured accordingly to the packets package. Pad 405 is linked to the ICD processor (see FIG. 

stored at address I:swap.htm. ^ and provides print characteristics to the processor for 

Referring to FIG. 24, an exemplary HTML code segment interrogation. 

911 which may be provided at a time 2 to address I:swap.htm 35 Because each ICD 401 is an identification badge, each 

via an ICD 10 and a resulting teraninal screen 499 are ICD 401 is uniquely associated with a single physician, 

ilhistrated. Segment 911 expands window 527 and reduces Therefore, when an ICD 401 is initially provided to the 

window 525 and provides three different types of informa- physician, the physician commissions the ICD 401 by plac- 

tion including a summary phrase 501, separate record or ing the physicians thumb on pad 405 a first time. During a 

information unit summaries in a table 913 and interaction 40 commissioning protocol, the first time a thumb is placed on 

icons 503 and 505. Phrase 501 summarizes table 913 infor- pad 405, the ICD processor discerns fingerprint character- 

mation and in the example indicates there are three records istics and stores the discerned characteristics in an ICD 

to review. Table 499 presents the records to review in memory (see FIG. 6). In addition to storing fingerprint 

summary form. The interaction icons include REVIEW and characteristics, the ICD processor is equipped with code for 

STORE icons 503, 505, respectively. 45 comparing fingerprint characteristics and based on die 

Either of icons 503 or 505 may be selected using a mouse comparison, for either allowing ICD functions to be per- 

controlled cursor (not iUustrated). Because the physician formed or disabling ICD 401. 

wishes to first use the Internet to access ABC Corporation To this end, prior to ICD 401 being used for any infor- 

data, the physician selects STORE icon 505 which stores the mation gathering, transmitting, generating or interrogating 

packets on a terminal or network memory device for later 50 purposes, a physician must place her thumb on pad 405 

review. Thereafter, screen 523 (see FIG. 22) is redisplayed, pressing button 403. With her thumb on pad 405, the ICD 

including expanded window 525 and reduced window 527 processor again discerns fingerprint characteristics and com- 

(see FIG. 22). Wndow 527 waits for additional packets on. pares the discerned characteristics with the stored charac- 

drive 1. In window 525 a personal menu of icons represent- teristics. Where the discerned and stored characteristics arc 

ing applications for the accessing physician is provided, one 55 essentially identical, ICD 401 is enabled. Upon a match ICD 

of the selectable icons corresponding to the physician's 401 may either be progranuned to be enabled for one 

Internet account. The physician selects the Internet icon, transaction or a certain number (e.g. 10) of transactions or, 

reviews ABC Corporation data and can then return to an in the alternative, may be enabled for a specific time period 

application which allows review of the stored packets. or, where ICD 401 is used to perform a transaaion within a 

Referring to FIGS. 1 and 22, in the second embodiment 60 specific time window, may remain enabled for a subsequent 

where packets are not transmitted until button 10 is pressed, period. 

when a physician gains access to a terminal, screen 523 is Where the discerned fingerprint characteristics do no 

initially di^layed, the physician's personal menu of appli- match the stored diaracteristics, ICD 401 may do any of 

cation icons diisplayed in window 525. In this case, the several different things. First, ICD 401 may simply disable 

physician selects the Internet icon, reviews the ABC Cor- 65 itself imtU an authorized facility administrator resets the ICD 

poration information and then closes the Internet applica- 401 for another identification attempt. Second, ICD 401 may 

tion. allow several (e.g. 3 or 4) attempts to generate a match and 
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only after several failed aUempls disable itself. Moreover, In addition, with ICD 401 only the physician who "owns" 

when ICD 401 disables itself ICD 401 may either cause an ICD 401 will be placing her thumb on pad 405 imless some 

audible or a visual signal indicating a mianatch and may mistake is made. Thus, ICD 401 is relatively sanitary, 

continue to cause the signal to alert passersby that an Another advanUge of ICD 401 is that, because ICD 401 

unauthorized person attempted to use the ICD 401. 5 ^ ^^^^^ ^ ^^^^ physician, only a single set of 

ICD 401 is uniquely advantageous for a number of fingerprint characteristics have to be stored by the ICD 

reasons. First, 1(^1 ensures that only a^ecific physician p^cessor and discerned characteristics during an inteiroga- 

associated with ICD 401 can use ICD 401 for collectmg, ^ compared to a single set of stored 

generating, and trananitting information and for intenogat- characteristics. Tliese advantages cut down both on required 

me other smart devices. This is particularly important, as , * 1 . • . 

wUl become clear below, in ices where ^ccessful memory and pjocessor time nec^ to complete an mte^^ 

. , L - * * -f ^ rogation which means that ICD 401 need only have a 

mterrogation enables a physician to perform some procedure 1 h 1 * l 

or to administer some drug. For example, one example ^ sump e processor. 

explained in more detail below allows a physician to open a migb^ also be noted that wiiile the fingerprint pad 

drug container (see FIG. 5) only after a successful interro- activation button has been described in the context of ICD 

gaUon is completed between the container and an ICD 401. 401, dearly this aspect of the present invention could be 

The interrogation is meant to ensure that the user of ICD 401 used in many other technical areas. For example, in the case 

is authorized to administer the drug inside the container. of a building entry security system as described above, a 

While the interrogation provides one level of security, there smart card may be provided which is similar to ICD 401 

is no way to ensure that a physician's ICD 401 will not be except that, upon enablement, the card may only be able to 

misplaced or stolen in an attempt to mismedicate a patient. ^ock a door. In this case, to open a locked door, first, a user 

With ICD 401, even if the ICD 401 is stolen, a would be places her thumb on a smart card fingerprint pad similar to 

mismedicator could not open a drug container unless the pad 405 (see HG. 23). The pad discerns print characteristics 

physicians fingerprint could also be duplicated. and provides those diaractenstics to a card processor. The 

Second, while other systems for identifying personnel via processor compares the characteristic to a stored charac- 

fingerprint or other biometric indicia axe prevalent in the t^^stic set correspondmg to the card owner. Only if the 

prior art, many such systems require that useis "give up" stored and discerned characteristics are essenUally idenUcal 

control of their indicia by providing the indicia to a system ^ <=ard be enabled to unlock the door. When the card 

administrator. For example, a security system for restricting ^ cnMcd, rather than mdicatmg the fingerpnnt character- 
access to an office building may include a security server and 30 ^tics to the security server, the card sends out an identifi- 

a plurality of fingerprint pads located at building entrances ^^tion signal to a receiver (e.g. RF or infra-rod) which 

and perhaps at other doors located throughout the building. Vrovidos the identification signal to the server The server 

TTie security server has access to a memory storage device compares the identification signal to stored vahd iden- 

where fingerprint characteristics corresponding to each per- ^^^ation signals to determme if the received signal cone- 
son who has authority to access the building are stored. To 35 ^pontk to a person who is authorized to open the door. The 

enter a building, a person places her thumb on a pad, the pad ^ ^^ned if a matdi occurs. In this manner a 

discerns fingerprint characteristics which are provided to the security system which uses personal biometnc mdicia can be 

server and the server compares the characteristics to all sets P^yi^^ without reqmnng users to give up control of their 

of fingerprint characteristics whidi correspond to personnel indicia. 

who have authority to access the building through the ^ Moreover, the fingerprint pad activation button could also 

specific door. Where discerned characteristics match a be used in the context of a credit card to enable or disable 

stored characteristic set, the building allows entry. If the a credit card on the basis of a simple fingerprint check as 

discerned and stored characteristics do not match, the build- described above with respect to the access card. To this end, 

ing restricts entry. to charge a purchase, a user places a thumb on a pad, a 
Unfortunately, with the system described above, each of 45 comparison is performed and, only when a match occurs is 

the people whose fingerprint characteristics are to be exam- a purchase authorized 

ined during an access attempt must agree to provide their While the inventive pad activation button has been 
fingerprint characteristics to the security server to enable described above in the context of a fingerprint pad, the 
comparison. While providing such biometric indicia is not invention is not meant to be so limited and any other 
dif&cult, many people c^ject to giving and only grudgingly 50 recognizable biometric indicia or uniquely personal bio- 
give, such information as they feel that type of information medical indicia could be used to activate a properly config- 
is private. Qearly, if every building a person entered would ured activation button. For example, a retinal scanner, voice 
have to have personal biometric indicia, peoples biometric recognition identifier ^kin texture identifier, etc., could be 
information would be virtually everywhere. used to activate a button and so on. 

Another problem with such a system is that, like a door 55 , „ « ^ - ^ « 

handle, many (c.g. hundreds and even thousands) people ^- OperaUon of an ICD m CoUecUng Data 

may be placing their thumbs on a single fingerprint thumb FIGS. 17A through 17C describe the operation of an ICD 

pad every day. Such access to the pad not only seems 10 in gathering and exchanging data with smart devices with 

unsanitary but in fact is unsanitary as germs are spread via which ICD 10 is in communicable range. This operation is 
the pad. 60 described particularly, but not by way of limitation, in the 

V/\ih the inventive ICD 401, all personal biometric indicia context of a ho^ital, where the exchange of information 

remains personal and does not have to be "given up" to some between ICD 10 and a phirahty of smart devices assigned to 

administrative server. This is because ICD 401 and not some various patients and distributed throughout the hospital may 

amorphous server, performs the interrogation and enables be limited by the access privileges corresponding to patients 
ICD 401 to operate. Thus, personal biometric indicia is 65 whom or with whom a physician is authorized to diagnose, 

never accessible by a device outside a physician's own ICD treat, or interact Referring again to FIG. 4, a single hospital 

which the physician controls to at all times. room 104 (FIG. 4) may include a number of smart devices. 
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including a computer terminal or workstation 60, a patient Moreover, the configuratioD information may also fadli- 

identificatioD di^lay 100, a bedside communication device tate hyper hnks to additional information which is related to 

96, a patient treatment device 116', and a patient monitor W, displayed information. For example, again, in the case 

each of whidi may communicate with the ICD 10 or, in where a medication is dispensed, di^Iayed information will 

some circumstances, with each other. 5 typically inchide the dispensing physician's name. In this 

„ ^ J • n u 1 * v<n / 171/^ '>\ case, the configuration information highlights the phya- 

GeDeraU5^ smart devices lito bracelet 40 (see FIGJ) or name 464 and provides a hyperuScaddiess "behiid" 

contajner 200 (see RG. 5) mdude mformadon about a physidan's name lo a biography site specifying infor- 

pauent or a medical event and/or generate mformation about ^ physician. Similarly, a patient's name or 

a medical event, the inchided or generated infonnation being identification number may be linked to a medical histoiy 

stored as one or more information segments in ttsfeOiyc W ^ hyperlink 445. 

device memories. When a physi^ decides to collect ^ ^ 

mformation from a smart device, the physician establishes -^^^^ ^^^^ information. Jhe physician appr^es the 

commumcauon between tfie device and the physiaan s ICD ^ ^ 3) -^^ 475 , 

10 and causes the smart device to transmit stored mforma- .^^ ^^^^ browser US causes an 

tionsegmentstolCDlO.Forthepuiposeof ^ « "electronic signature" to be atUched to the approved infor- 

Ihe term "data record « used to describe a groupmg of ^^^.^^ ^^^^^^ ^^^^ ^ j^^, 

mformahonwhichistobetrat^enedamongsysterndevices ^h^^^^ browser US sends the approved information to 

and may mclude a simple mtorroation segment or a more - * * jj r * j/ 

T ' , . *^ . - . - , the server target address for storage and/or processing, 

complex construct such as an mformation packet referenced Jr ^ ,j .1.^ 

I. J J v. A • J . -1 u 1 or\ in the preferred embodiment, data exchange between an 

above and descnbed m more detail below. 20 *^ , ^ j • j i 

. . ICD 10 and a ^art device associated with a particular 

When ICD 10 receives one or more information ^^^^^^ ^ conditioned upon, and must be preceded by, 

segments, ICD 10 recognizes the nature of the segments and establishing an "association" between a physician using an 

stores related segments as an information umt m HTNfL p^^^^^^ ^ ^^^^ 

format. In addition, ICD 10 may also generate other infor- associated. Preferably, an association isdigitaUy recorded by 

mation segments which can be added to received segments j^q jo in the form of information uniquely identifying 

to provide enhanced mformaUon umts. Exemplary addi- the patient, the anart device and/or the ICD 10 itself, and the 

tional segments may include a time and date stamp gener- ^ j association. This information may later 

ated by badge processor 250 (see FIG 6) and physician appended to information packets exchanged with smart 

identifying mformaUon (where available). ^ ^^^^^ ^ computer terminals 60, providing information 

Moreover, ICD 10 also provides two other types of packets with a complete audit trail. Further, smart devices 

information. First, ICD 10 includes an address specifier (i.e. and ICDs 10 themselves may also digitally record associa- 

the ICD processor) which provides a server target address tions in a similar fashion. 

for each information unit formed. The target address sped- Referring to RGS. 1 and 17A, at step 824, a physician 

fies a ^cific server or database address to which the attempts to initiate a communication link or exchange infor- 

information unit should be sent for storage or processing on ^^^^^ ^ placing the physician's ICD 

system 194 (see FIG. 7). Second, ICD 10 also provides proximate a smart device and pressing ICD activation 

browser formattmg mformation which mdicates how button 18 (FIG. 1). Depending on the sophistication of ICD 

browser U5 should present information in an associated ^ d&wioc and the sensitivity of the informa- 

information unit on di^lay 103. 40 tion to be exchanged, the communication esUblished with 

For each information unit browser 10 assembles an infor- the smart device may or may not utilize public key cryp- 

mation packet which includes the information segments in tography. While link initialization may be automated rather 

each unit, an associated server address and relevant con- than user-initiated, making the links user-initiated allows 

figuration information. ImportanUy, each information packet icx) 10 to conserve energy and prevents urmecessary link 

assembled by an ICD 10 is in HTML format so that the 45 initialization with devices with which a physician is not 

packet can be received by a conventional browser 115 for concerned. Alternatively, the smart devices may be individu- 

display. ally and manually enabled to communicate through the use 

Subsequentiy, after a physician has gained access to a of activation switches incorporated in the smart devices, 
terminal 60 (see FIG. 3), the physician causes information Provided that the signal path between an ICD 10 and a smart 
packets assembled by the physician's ICD 10 to be trans- 50 device is substantially unobstructed and short enough that 
mitted to the terminal 60 via an input device 64. The packets signal transmissions are not excessively attenuated, a corn- 
are received and read by browser 115. Browser 115 di^lays munications link is established. 

information unit information in the format indicated by the in step 828, ICD 10 evaluates the existence, if any, of an 

configuration information and stores the relevant server association between the ICD 10 and any patient (not nec- 

target address. 55 essarily the particular patient to which the linked smart 

In addition lo indicating bow information unit informa- device is directed). An association exists if ICD 10 has most 

tion is to be configured on display 103, configuration infor- recently been used with a smart device which is associated 

mation may also provide on-screen tools for modifying with a patient. In this case, ICD 10 stores information 

some or all of the unit information di^layed. For example, specifying a specific patient. For the purposes of this expla- 

where displayed information specifies a medication dose 60 nation it will be assumed that the identifying information 

which was supposedly delivered to a patient, while the comprises a patient's identification number which, if an 

displayed dose may indicate the dose dispensed by a association exists, is stored as an identification information 

pharmacy, upon administration, a physician may have segment by ICD 10. Thus, to determine if an association 

elected to modify the dose. In cases where such modifica- exists, ICD 10 determines if an identification information 

tions can be anticipated, the configuration information pro- 65 segment is occupied. If there is no association, in step 832 

vides a tool (e.g. a pull down window) for modifying the ICD 10 transmits to the smart device its own identification 

displayed dose prior to storing the unit information. information and a request for information to be returned. If 
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there is an association, in step 836 ICD 10 tran:^ts its own information previously recorded in establishing the current 

identification information, patient identification information association between ICD 10 and patient) are combined to 

(of the patient with whom ICD 10 is associated), and a form an information unit Further, the ICD 10 emits said 

request for data to be returned. second audible sound to indicate the successful transaction. 

Steps 832 and 836 are each followed by step 840, in which 5 If the data record or information segment recorded in step 

ICD 10 waits for a predetermined time period for a response 860 is not a patient identification record (step 864) and if 

firom the linked smart device. If no response is received ICD 10 is not currently associated with a patient (step 888), 

within the predetermined time period (step 848), then in step then in step 896 the data record is modified to include 

852 ICD 10 emits a first audible sound to alert the physician identification information attribiUable to the physician to 

that no response was received firom the smart device. In step lO which ICD 10 is assigned. To this end, the received infor- 

856 the operation initiated by the physician in step 824 is mation segment is combined with a ph)rsician information 

terminated. If instead a smart device transmits a re^onse in segment which identifies the physician and perhaps other 

the form of a recognizable information segment \^iiich is information segments (e.g. a time stamp) to form an infor- 

received before the predetermined time period elapses (step mation unit. Further, the ICD 10 emits said second audible 

848), then referring also to FIG. 17B, in step 860 the data 15 sound to indicate the suocessfiil transaction, 

record or information segment contained in the response Although not illustrated by flow chart, association of ICD 

signal is stored. In addition, referring also to FIG. 6, pro- 10 with a patient may be manually terminated by depressing 

cessor 250 identifies the time and date via clock 254 at activation button 18 for a few seconds, after which ICD 10 

which the information was received and stores a time stamp emits an audible sound to indicate that the association has 

as a second information segment, combined with the 20 terminated. An association with a patient may also be 

received information segment, as an information unit. automatically terminated after a sufficient period of inactiv- 

One type of information segment or data record which ity with respect to ICD 10. 

may be transmitted to an ICD 10 is a patient identification FIG. 14A illustrates an exemplary HTML coded informa- 

record. An exemplary record is illustrated in FIG. 9 and tion packet 440 which corresponds to a medication dispen- 

inchides an identification number, name and distinguishing ^ sation event and which is provided by an ICD 10. Packet 440 

characteristics. AH or only a smaU part of the information may be provided in any of several different ways, 

illustrated may be included in a transmitted record but at pijst, packet 440 may be constructed by ICD 10 as ICD 

least the identification number is tram^tted. lo receives certain types of information. In this case, ICD 10 

If the data record or information segment stored in step ^ is provided with packet configuring software which recog- 

860 is a patient identification record (step 864), and if ICD nizes information segment type and thereafter tailors a 

10 is already associated with the patient indicated by the specific packet for the received segment, 

record (step 868), then in step 876 ICD 10 emits a second Second, packet 440 may be constructed primarily by 

audible sound readily distinguishable to the human ear &om some other network device and provided to ICD 10. For 

the first audible sound of step 852, signaling to the physician example, referring again to FIG. 7, dose dispenser 150 

that ICD 10 is associated with the patient and that the dispenses medication for administration. The type of infor- 

exchange of information was successful. mation generated during administration is often very similar 

If the data record or information segment recorded in step (e.g. time, date, type, dose, patient ID, physician ID, etc.). hi 

860 is a patient identification record (step 864), but ICD 10 this case, dispenser 150 may provide a general packet format 

is not associated with any patient (steps 868 and 872), then 40 to a medication container (see FIG. 5) which is in turn 

in step 874 ICD 10 records the patient's identification provided to ICD 10 when a drug is administered, 

number in the identification information segment to estab- Third, a smart device (e.g. an IV pump) may provide a 

hsh an association and in step 876 emits said second audible general packet format including target address along with 

sound. data provided to an ICD 10. 

If the information segment recorded in step 860 is a 45 In FIG. 14A, packet 440 includes a target address fiekl 

patient identification record (step 864) identifying a first 444 which specifies a server address to which packet infor- 

patient, but ICD 10 is associated with a second patient (steps mation is to ultimately be delivered. The exemplary target 

868 and 872), then in step 878 the association with said address includes a hospital name, an event type 

second patient is closed and a new association is estabUsbed ("mediation*^ an event specifier ("'given'*), a patient identi- 

by recording the first patient's identification number in the 50 fication number ("987654321"), an event date and an event 

identification information segment In step 880 ICD 10 time. Packet 440 also includes a report type indicator 448, a 

emits said secorKl audible sound twice to indicate the closure field 452 for indicating that patient ID has been verified and 

of a previous association and the initiation of the current format medication quantity fields and 456 and 460 indicat- 

association. ing how much of the dispensed medicines was administered. 

If the data record information segment recorded in step 55 To this end, fields 456 and 460 are set up so that, initially, 

860 is not a patient identification record (step 864) but if each format field 456, 460 causes the medicine dose dis- 

ICD 10 is ah-eady associated with a patient (step 888), then pensed to be diq>layed. In addition, fields 456 and 460 

in step 892 the data record is modified. In this regard, the provide interaction tools for modifying the displayed dose to 

received information segment is combined with the current reflect actual administered doses. Thus, field 456, which 

identification information segment (i.e. the segment which 60 corre^nds to Penicillin dose, allows a physician to modify 

identifies the patient with which ICD 10 is currently an initially displayed dose of 2 capsules by selecting either 

associated) and perhaps other information segments to form 1-5, 1, 05 or none as the actual administered dose. Similarly, 

an information unit (i.e. an enhanced data record). The other field 460, which corresponds to lyienol dose, allows choices 

information segments may include a time stamp segment, a of 1, 0.5 and none to identify administered dose, 

physician segment and so on. The information segment 65 Packet 440 also includes a physician identification field 

received and other information segments wiiich identify 464, and a date and time field 468 indicating time of 

both the physician and the patient (i.e. the identifying medication administration. Packet 440 further includes a 



us 6,408330 Bl 

37 38 

dispenser identificatioD field 468 indicating the physician address for the information unit. Further, in step 916 the ICD 

who di^nsed the specific medication, the date and time of 10 emits said second audible sound 

the dispension and so on. Hidden fields 472 whidi incor- Dictation information is treated like any other gathered 

porate information to be transmitted along with information information in the sense that ICD 10 formulates an infor- 

to be displayed but concealed firom view through the 5 mation packet including a segment associated with the 

browser display, may also be added. Information appropri- collected information. The only difference is that the col- 

ately concealed may include initial quantities of medication lected information is digital audio. It is contemplated that 

dispensed, which information may be compared with the vs^en a packet includes a dictation segment, ICD 10 will 

amount actually administered. Packet 440 further includes construct a packet including a field which will provide a 

an approve field 476 which specifies configuration of an jg "Dictation" icon associated with the dictation segment, the 

APPROVAL icon on di^lay 103. The APPROVAL icon icon being displayed when the packet information is 

allows a physician to approve of information displayed via reviewed via browser 115. When the dictation icon is 

browser 115. When field 476 is displayed and an associated selected, the dictation associated therewith is replayed via 

icon is selected via browser 115, information in packet 440 terminal 60 for physician review. In addition, other icons for 

is transmitted for storage to a database 158 or 162 at the controlling dictation review (i.e. fast forward, reverse, stop, 

server target address indicated in field 444. pause, etc.) may be configured via packet configuration 

Referring also to FIG. 14B, an exemplary browser screen information. 
480 which corresponds to packet 440 is illustrated. Screen In addition, it is contemplated that in many instances both 
480 includes a plurality of elements which indicate all statistical information and audio dictation may be collected 
information associated with a drug administration event. 20 during a single patient visit. In this case, ICD 10 may do one 
The elements, whidi correspond to identically marked fields of two things. First, ICD 10 may foimulate a single message 
in packet 440 (see FIG. 14A), include an identification packet which includes all collected information and appro- 
element 445, a report type element 448, an ID verification priate browser configuration information. In addition, in this 
element 453, modifiable dose elements 456 and 460, an case, if appropriate, ICD 10 may be programmed to, gen- 
administrating physician identification element 464 includ- 25 ^^^^ more than a single target address for all of the padcet 
ing date/time 469, a di^nsing physician identification information or, different target addresses for the various 
element 468, and approval icon 476. When formatted data types of packet information. For example, ^^e a dictation 
packet 440 is transmitted to a terminal 60, the ICD 10 may segment should be transmitted to a transcription server for 
be programmed to emulate a file structure device, wherein conversion to text (either manually or automatically by 
the open file command of the browser 480 may be used to 30 voice recognition software), medication administration 
request data from the ICD 10. information should be provided to the pharmacy server for 

Thus, generally, ICD 10 formats an information packet logging and to determine if proper administration occurred, 

(i.e., in the present example, a medication administration Either all information could be provided to both the tran- 

record) for delivery to network system 194 via a computer scription and pharmacy servers or only relevant information 

work station 60 which includes three types of information. 35 may be provided to the respective servers. 

The three information types include general information Second, where more than a single type of information is 

(including, perhaps identification information) to be stored, collected during a single patient visit, ICD 10 could be 

a target server address (i.e. a target address field) at which progranmied to formulate two separate information packets 

the general information is to be stored and browser screen for dehvery to a terminal 60, a separate packet oorrespond- 

configuration information (i.e. format fields) indicating how 40 ing to each information type. For instance, in the example 

the general information to be stored should displayed for above, one packet may be formulated for dictation while a 

review, modification and approval by a physician. second packet is formulated for statistical information. 

In addition to receiving information from a smart device. While various packet schemes are possible, the preferred 
ICD 10 is also capable of receiving dictation for storage in scheme provides only a single information packet for each 
one or more information units for delivery to system 194. 45 patient visit which would include all types of information 
Referring to FIGS. 1 and 18, while observing or treating a collected. This scheme has the advantage of maintaining a 
patient, a physician may, in step 900, press dictation button complete record for each patient visit which can be stored in 
26 and dictate messages (step 904) into microphone 22 of a patient's historical records to memorialize all a^)ects of 
ICD 10. Digitizing circuitry incorporated in processing this visit Then, if specific servers require specific collected 
circuitry 260 (FIG. 6) digitizes the message (step 904), 50 information (e.g. dictation, administration, administering 
which is recorded as a message record or dictation infor- physician, etc.), a central server can determine which infor- 
mation segment in memory element 262. If ICD 10 is mation shoidd be sent to each ^cific server, 
associated with a patient at the time the dictation is recorded In addition to generating specific information packets for 
(step 908), then in step 912 patient identification information transmission to browser 115, ICD 10 is preferably pro- 
and a time stamp are incorporated into the message record. 55 grammed to construct an initial screen packet. The initial 
To this end, ICD 10 combines the identification information screen packet, like other information packets is formatted in 
segment, the time segment and the dictation information a conventional language such as HTML so that, when 
segment into an information unit Further, in step 912 a received by browser 115, browser 115 can di^lay packet 
database address or server target address is formulated for information as specified. The initial screen packet will 
the information unit using the time stamp, the dictation data 60 typically include information which summarizes other pack- 
type and patient identification information. Further, in step ets to be transmitted to a terminal 60 and configuration 
912 the ICD 10 emits said second audible sound. If the ICD information. For example, where ten information packets are 
10 is not associated with a patient at the time the dictation to be tran:^tted to a terminal 60, the sunmiary information 
is recorded (step 908), then in step 916 a time stamp segment may simply indicate "There are 10 patient records to 
is added to the dictation information segment to form an 65 review." The configuration information indicates how the 
information unit. Further, in step 916 the dictation data type summary information should be displayed, may provide 
and time stamp are combined to form a partial database instructions and typically provides icons for physician inter- 
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action. Exemplary icons include a "REVIEW" icon and a the patient bedside device 96 no longer senses the presence 

"STORE" icon. An exemplary initial screen 499 is illus- ofthe patient. Patient diairs may be similarly equipped with 

trated in FIG. 24 and includes a prompt phase 501 and icons smart devices to sense the presence of a patient and to 

503 and 505. convey such information to a patient identification display 

Referring to FIG. 3 when ICD information packets are 5 100. Further, in order to establish an association with a 

transmitted to a terminal 60, the initial screen packet is also patient, the ICD 10 may be required to establi^ a commu- 

transmitted. The input device 64 receives all padcets, dis- nication link with the patient identification display 100 

tinguishes the initial screen packet from other packets, stores instead of or in addition to the wrist bracelet 40, which 

the other packets in RAM 109 and provides the initial screen patient identification display 100 would in turn transmit the 

packet to browser 115 for display. Browser 115 displays an ^ patient identification information to the ICD 10. This would 

initial screen (see FIG. 24) corresponding to the initial permit the transfer of patient identification information 

screen packet providing interaction icons REVIEW 503 and without the possible necessity of disrupting the patient in 

STORE 505. order to establish a communication link with the patient's 

If REVIEW icon 503 is selected, browser 115 accesses the wrist bracelet 40. 

first packet in RAM 115 and di^lays associated information 15 ^ p^y^^j ^^^^ ^ ^^^^ patient room 104 or 

as configured by the packet After review of the first packet ^^^^^^ ^ p3t-g„t identification display 100 

browser 115 displays record packet informaUon and so on. ^^^^ p^^g^j identification information from the 

If STORE icon 505 is selected, browser U5 stores the initial ^ ^^^^^^ ^ p^^^^^j structured 

screen packet along with associated other informaUon pack- ^ trananit that information to the Admit, Discharge and 

ets in RAM 109 (or some other suitable storage locaUon) for 20 Transfer System 166 (FIG. 7) of the computer network 194. 

later review and ^roval. AUematively, the paUent identification display 100 could 

Other aspects, not included in FIGS. 17A through 17C, display a request for input indicating whether or not the new 

may be involved in communicating with or between certain patient is to be marked as having been transferred to the 

smart devices. In one embodiment, the presence of a phy- instant patient room 104. A patient monitoring device 80 

sician in proximity to a patient enables communication 25 (FIG. 4) or bedside treatment device 178 (FIG. 7) may reject 

between the patient's wrist bracelet 40 (FIG. 2) and the ^ data exchange request from an ICD 10 if the physician 

physician's ICD 10, The communication link may be initi- wearing the ICD 10 is not authorized or cleared to diagnose 

ated by pressing the activation button 18 on the ICD 10 administer treatment to the paUent. HG. 12 illustrates the 

and/or an activation button (not illustrated) on the wrist contents of the monitoring or treatment device information 

bracelet 40, provided there is a complete signal path between 30 38O that the bedside treatment device or patient monitoring 

the ICD 10 and the wrist bracelet 40. Once a communication device 80 may transmit to the ICD 10 if the data exchange 

link is established, ICD 10 identifies the patient and records authorized. As part of a double-audit function, the moni- 

the establishment of an association with that patient. ICD 10 device 80 or the bedside treatment device 178 would 

may also request and receive additional information stored i^^f record any data transaction made with an ICD 10. 

by the wrist bracelet 40, providing a beep, vibration or other 35 

sensational signal to indicate a sucoessfiil transmission or to VII. Electronic Signature 

alert a physician. The wrist bracelet 40 may also record in its • .1 * • j ■ i? 

*i- *n:-j *- ' c J • Heremafler, while mformation umts and information 

own memory the staff identification mformation and current , , , . •« . 1 . j .1. 

date and time fom the ICD 10 to jrovide an audit traU of the P=«=kets 'i? descnbed above an: suB contemplated, other 

physicianswhohaveassociatedtbemselveswiththepatient. 40 types of mformahon such as word processor doomients^ 

If ^mmuBication and association is established with spread sheets and the hke are jilso contempk^ 

another wrist bracelet 40 or, if not, after a preset period of ^otm;^K>n types wiU be collectively referred to as docu- 

time has elapsed, the ICD 10 regards the association to have * 

terminated and alerts the physician to this fact with another An extremely important aspect of the present invention is 

beep, vibration or other sensational means of communica- 45 ^ physician's identity is added to collected information 

or documents prior to long term storage or transmission to 
In another embodiment, the wireless communication ? server for further processing. By adding a physidan's 
means 52 of wrist bracelet 40 (HG. 2) may utilize alternate identity, the system creates proverbial ownership of the 
communication means, such as magnetic coupling or low document (i.e. informaUon coUected). 
power radio transmission, rather than the preferred in&ared 50 Taking this "ownership" one step further, according to 
means of the ICD 10. Similady, the bedside communication another a^ect of the invention, the information approval 
device 96 (FIG. 4) of a patient bed 88 may also utilize process which must be performed prior to long term docu- 
altemate communication means. Further, the communica- storage or transmission to a server requires a physician 
tion range of wrist bracelets 40 or other smart devices may to take "responsibility'* for approved documents. To this end, 
be limited in order to prevent two devices from receiving the 55 the present invention contemplates a digital signature pro- 
same request Instead of communicating directly with the cedure M^ereby, when a physician approves a document, the 
ICD 10, the wrist bracelet 40 may communicate with patient physician's identity and, also preferably, an indication of the 
identification display 100 dirccUy or indirectly via coramu- content of the document approved, are added to the 
nication with the communication means of a bedside com- approved document. This type of approval system helps 
munication device 96. A patient identification display 100 60 ensure that documents are accurate. This is because, if a 
may also have transceiver device 64 compatible with the physician knows approved documents are to be recorded and 
communication means 14 of the ICD 10. The smart devices attributed to the approving physician, the physician will be 
may be arranged and implemented so that the patient iden- more careful to ensure document accuracy, 
tification display retrieves the patient identification informa- In one embodiment a simple text phrase is provided in a 
tion from the wrist bracelet 40 and electronically di^lays it 65 document approval field. For example, upon approval the 
The patient identification display 100 may be programmed phrase, "Dr. Smith approved this document on Tuesday, 
to cease displaying the patient identification information if Aug. 25, 1998 at 10:30 AM", may be added to the document. 
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The pbysidao's identity may be determined in any of slightly grey. While the spectiic color is slightly dififereot 

several different manners. For example, as a physician's than other white pixels, the difference is not detectible by the 

ICD 10 must gain access to a terminaJ to review document human eye. Instead, a computer is required to identify the 

information, the physician's ICD 10 may, during the inter- pixQated watennaik. In this case, if an electronically mariced 

rogation process, provide an indicator of the physician's 5 screen is electronically copied, suitable software running on 

identification. In the alternative, each time an approval icon a computer can be used to analyze the copy and detect the 

is selected the terminal may send a message to the physi- electronic watermark (e.g. the unique pixel intensities). In 

cian's ICD 10 requiring a physician's digital signature. addition, where an electronically marked document is 

When the message is received the ICD 10 transmits the printed out, the watermark shoidd be reproduced as a printed 

physician's digital signature in encrypted form. In this case, lo mark ^ich can be used for subsequent authentication, 

when a terminal receives the encrypted digital signature the Moreover, where a printed document including a mark is 

terminal deciphers the encryption and correlates a physician copied using a high quality copier the mark should be 

with the digital signature. reproducible and thereafter useable to authenticate. 

In another embodiment, when a physician logs onto a In addition to unique pixel shading, electronic marks can 

terminal in a conventional manner (e.g. entering a password) 15 be provided by providing different pixel intensities, pixel 

via a keyboard), the terminal may identify the physician and intensity or shading designs, a uniquely configured pixel bar 

subsequently add the physician's identity to each document adjacent a graphic design and so on. 

approved by the physician. Like a digital picture, a physician's digital signature 

While a simple text phrase indicating approval suffices to picture includes perhaps thousands of pixels. Unique signa- 
convey that a specific individual approved a document at a ^ ture picture pixel characteristics can be provided which can 
specific time, such text phrases are relatively impersonal and be used to identify authentic signature pictures, 
therefore have relatively litde value in terms of creating a Unfortunately, as with a screen, a copied signature picture 
"feeling" of responsibility for approved documents. will often include the watermark pixels and therefore an 
Therefore, preferably, instead of providing an impersonal authentic signature picture, as opposed to an electronically 
text phrase to indicate approval, a picture of a physician's ^ or manually (i.e. physical cut and tape) copied signature 
actual scripted signature (i.e. a signature picture) may be picture, may be difficult to identify, 
digitized and stored in an ICD memory, the signature picture To overcome the problem of accurately copied water- 
provided to the terminal for insertion in the approval field marked digital signature pictures, the present invention 
along with the time and date of approval. The signature has inchides a content varying watermark which is generated as 
traditionally been an indicator of responsibility and therefore a function of the content of a document to which a signature 
indicates the import of the approval process to the approving is applied. 

physicians. Generally, according to the present invention, in addition 

Unfortunately, even where a digital signature picture is to storing a physician's signature picture, an ICD memory 

provided, it is possible for an unscrupulous physician or also stores a standard watermark (SM) which corresponds to 

some other unscmpulous person who has access to a stored the physician and a program for modifying the standard 

document to effectively electronically modify the approval watermark SM as a function of document content (DC), 

field by, for example, copying a physician's digital signature when a document is to be electronically signed, the docu- 

picture from one approval field into another. While such ment is traiD^tted to the physician's ICD 10. The ICD 10 

copying may be accomplished electronically by cutting a ^ recognizes the requirement for signature, retrieves the stan- 

signature picture from one digital document to a£K)ther, such dard mark, mark modifying program and signature picture, 

copying or forgery may also be accomplished after a digital isolates document content, modifies the standard mark as a 

document has been printed out in paper document form. For function of the document content, places the modified mark 

example, after a digital document is printed, a physician's on the scripted signature picture or on the document itseff, 

signature may be clipped out of a first document, taped on places the marked signature picture on the document in an 

a second document and copied via a high quality copier approval field and retransmits the "signed" document to the 

thereby rendering a document which was seemingly signed terminal. The modified mark MM can be expressed as: 
by the physician. 

To ensure authentic signatures on documents, the present mm^m+J[DC) 

invention further includes an electronic "watermaridng" 50 wherein f indicates a function. Other equations for identi- 

procedure. A watermark is a mark which is difficult to fying the modified mark MM may be used. For example, 

reproduce and which is "laid over^ some other information mark MM may be a function of both the standard mark SM 

generally for the purpose of identification and indicating and document content DC (i.e. MM-f(SM, DC)) or may be 

authenticity of the underlying information. For example, afunctionof both standard mark SM and a different function 

often a watennark will be provided on paper currency, the 55 of document content DC (i.e. MM-f (SM, fl(DQ)), etc. An 

mark appearing like a water stain across a portion of the example of how this aspect of the invention operates is 

paper, hence the term "watermark". Watermarks have also instructive. 

been used to mark copyrighted material, the marks subse- in this example, it will be assumed that a physician is 

quently used to identify any copies of the copyrighted currently logged onto a terminal, has download various 

material. 50 documents to the terminal for review and now wishes to 

Unlike currency watermarks, electronic watermarks and approve a document prior to long tenn storage, 
differences there between often are difficult to perceive via Referring specifically to FIG. 25, when a physician selects 
the human eye. Instead, electronic marks include pixels an approve icon to approve a previously reviewed 
within a displayed picture which have specific and known document, at block 601 the terminal determines if a water- 
characteristics. For example, one electronic mark on a 65 marked signature is required for the document to indicate 
screen display may inctu^ modified white pixels where approval. Where a watermarked signature is required, at 
every 10th white pixel which appears within the picture is block 603 the terminal transmits the content of the document 
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to be "signed** to the physician's ICD 10 along with a simple To allow a physician to coofinn that ^proval occurred it 

instruction indicating thai a digital signature is required. is contemplated that, according to at least one embodiment 

Referring also to HG. 26, when the ICD 10 receives the of the invention, after a terminal di^lays a document 

document and instruction at block 650, ICD 10 recognizes inchiding a signature picture, and prior to storing the docu- 

the instruction and ICD control passes to block 652. In some 5 ment to long term storage or transmitting the document to a 

cases a document may inchide minimal information and server for further piocesang, the terminal may provide a 

therefore it might be difficult to generate a distinct and "STORE" icon which^ when selected, stor^ or tra^^ 

difficult to decipher watermark MM. Therefore, although not document mchiding tbe signahire picture, ^en the STORE 

arequirementof theinvention.itiscontemplatedthat,inone iconis selected the dooiment is transmit^ 

V J I. J- . .1. Ml 1- • • *u u ij When an approved document is accessed at a subsequent 

piefertcdembodmient^^erewiUbeammimumor lO ^ ^^^^^ ^^^^ ^ ^ ^ ^ 

document content (WC) reqmrement which mdicates the authentic, the physician's ICD 10 which was supposedly 

mimmum amount of content required to generate a mark ^ ^^^^^ signature picdire can be used during an 

MM. Where the document content DC is less than the authentication process to re-generate tbe su^)ect document, 

requirement TDC, additional information, either random or -j^g^^ suspect and regenerated documents can be com- 

meaningfiil, is added to content DC prior to modifying the 15 pared to determine if the suspect document is authentic, 

standard mark. Meaningful data may include the current Where the documents are dissimilar, an electronic forgery 

time or date. has been identified and the suspect document is identified as 

The additional information is not necessary to understand a forgery, 

the meaning of tbe document. Therefore, it is contemplated To confirm authentic approval, it is contemplated that, 

that the additional data would typically be added to the 20 software which allows a physician to retrieve and review 

document in some non-visual manner. For example, the stored information units will provide some authentication 

additional data may be added as some hidden text in a functions ^lile each physician's ICD will facilitate other 

hidden note field or the like. On the other hand, the addi- required functions. For instance, in one exemplary embodi- 

tional data may be added as a visual bar having varying pixel ment the retrieval/review terminal software is capable of 

intensities. The important aspect of the additional data is that 25 scaiming in a watermarked scripted signature picture from a 

the additional data enables a secure content specific water- hardcopy of a document, scaiming in an entire document 

mark to be generated which is not easily subjected to including a watermarked signature picture, or selecting a 

decryption. signature picture finom a document displayed on a screen. In 

Referring again to FIG. 26, at block 652, ICD 10 com- addition, the software can magnify a digital signature and 

pares the document content DC with the threshold require- 30 digitize the signature and watermark and can transmit tbe 

ment TDC. Tbe comparison may be as simple as comparing signature to an ICD along with a command requesting 

the number of words or characters in the DC to a cone- signature authentication. Moreover, the software also 

sponding threshold number TDC. Where the DC exceeds the enables the terminal to receive a document from an ICD for 

TDC, control passes to block 656. Where DC is less than the display. The software may also enable split windows so that 

threshold requirement TDC control passes to block 654. 35 a su^ct document and a regenerated document can be 

At block 654 ICD 10 adds additional text or numbers to viewed side-by-side to facilitate visual authentication, 

the DC thereby generating a new document content. As Furthermore, the software may be able to perform document 

indicated above, tbe additional data is preferably, although comparison to identify document discrepancies, 

not necessarily, added so that it will not appear on the To authenticate, the ICD is able to receive a watermarked 

document when the document is displayed. 40 signature from a terminal, remove tbe standard graphic 

At block 656 ICD 10 retrieves the ICD user's scripted watermark from the watermarked signature, generate a 

digital signature picture and appUes the signature picture to regenerated document from the remaining marked signature 

an appropriate and designated location (i.e. the approval and transmit tbe regenerated document to the terminal for 

field) on the document At block 656 ICD 10 retrieves the examination. An example of how a signature is authenti- 

standard graphic mark from the ICD memory and modifies 45 cated is instmctive. 

the standard mark SM as a function of the document content After a physician gains access to a terminal via an 

DC (e.g. the original document plus any additional data ICD-tenninal interrogation, the physician selects a review 

added phis the digital signature picture) to generate a software application whidi allows tbe physician to select 

modified mark MM. At block 659 ICD 10 applied the and examine one or more documents which were previously 

modified mark MM to the scripted digital signature picture 50 approved and stored on a server in tbe manner described 

generating a watermarked signature picture. above. After selecting the review application, the physician 

At block 660 ICD 10 replaces tbe digital signature picture selects one document (e.g. patient record or check, etc.) to 

on the document with the watermarked signature picture and examine and, referring to FIG. 27, at block 701, the software 

at blodc 662 ICD 10 transmits tbe ''signed" document back displays the selected document, in HT^L format as earlier 

to the terminal. 55 stored. As part of the stored document, the software displays 

Referring again to FIG. 25, after having transmitted a a digital and watermarked signature picture purportedly 
document to an ICD at block 603 the terminal awaits return representing the signature of the physician who approved the 
of a signed document at block 605. When a document is document. The date and time of approval may or may not 
received by tbe terminal control passes to block 607. At also be displayed. In addition, the software also provides an 
block 607 the terminal detennines if the received document 60 "AUTHENTICATE" icon adjacent tbe digital signature pic- 
was signed. At block 609, where the document has not been ture. It will be assumed that the reviewing physician is the 
signed for some reason, the terminal indicates failure to sign. physician who purportedly originally approved the docu- 
At block 611, where the document has been signed the ment being examined and that the physician's scripted 
terminal stores the signed document. In addition, to facihtate signature picture, standard watermark and mark modifying 
the "feeling" of ownership and responsibiUty for the signed 65 program, all stored on the physician's ICD, remain the same, 
document, the terminal may display the document with the While the physician is reviewing the document, the phy- 
physician's scripted digital signature picture thereon. sician notices something which the physician cannot remem- 



us 6,408330 Bl 



45 



46 



ber approving. For example, while the document may indi- 
cate that eight c^>sides of drug A were administered to a 
patient the physician may clearly remember that only two 
capsiiles of another dmg B were admimstered. While the 
physician recognizes that she may have made a mistake, the 
physician nonetheless would like to authenticate the docu- 
ment. 

Referring again to FIG. 27, to authenticate the document, 
at block 703 the physician selects the AUTHENnCATE 
icon and the software recognizes the selection. At block 705 
the software identifies the watermarked digital signature 
picture and isolates that portion of the displayed document. 
Next, at block 707 the terminal trananits an authenticate 
request to the ICD along with the watermarked signature 
picture. At decision block 709 the terminal waits to receive 
a re-generated document from the ICD 10. 

Referring also to F\G. 28, at block 801 the ICD receives 
the authenticate request and the watermariced signature 
picture. At block 803 the ICD retrieves the standard water- 
mark and the physician's digital signature picture from its 
memory. At block 805 ICD 10 removes the standard water- 
mark from the watermarked signature picture thereby gen- 
erating a watenmark whidi ^)ecifically corresponds to docu- 
ment content. At block 807 ICD 10 expands the remaining 
content watermark into a re-generated document The 
re-generated document includes the document which was 
originally approved by the specific instance of the physi- 
cian's digital signature picture and may include additional 
data if additional data was added to the approved document 
during standard watermark modification. At block 809 the 
ICD transmits the re-generated document to the terminal. 

Referring again to FIG. 27, at block 709 when the 
regenerated document is received, control passes to block 
711 where the terminal displays both the suspect and 
re-generated documents side-by-side for comparison. The 
physician should then be able to visually compare docu- 
ments to determine if the documents are identical. 

If desired, the terminal software can be equipped to itself 
compare documents to determine similarity. To this end, at 
block 713, the software compares the suspect and 
re-generated documents. In addition to comparing visual 
document information (e.g. text, graphics, data, etc.), the 
terminal software can also compare any additional data 
which was added to an original document to the additional 
data in the regenerated document. Thus, even hidden or 
visually meaningless (e.g. a bar having varying pixel 
intensities) random information can be used to authenticate 
an associated document. 

Qearly, facilitating document comparison via software is 
advantageous for several reasons. First, as indicated above, 
random data comparison ensures a more thorough compari- 
son. Second, presumably software comparison would be 
much faster than visual manual comparison. Third, for long 
documents such as a mortgage, contract, historical medical 
record, etc., software could compare every aspect and all 
document information to identify even a single document 
change. 

Referring again to FIG. 27, where an original and a 
re-generated document are identical, the terminal indicates 
authentication at block 715. Where the documents are even 
slightly different the terminal indicates "no match" at block 
717 signaling that the signature on the suspect document 
was not provided by the physician. 

In another embodiment of the invention public key 
encryption (PKE) may be used with a digitally watermarked 
signed document to authenticate the document in the 
absence of a physician's ICD. A conventional PKE system 
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is described in U.S. Pat. No. 5,689,567 (hereinafter "the 
'562 patent") which has been referenced above and which is 
incorporated herein by reference. Generally, in a PKE sys- 
tem each system user has both a "secret key" and a "public 
key" for encryption purposes. To effectively mark a docu- 
ment for authentication purposes a mark (i.e. bar graph or 
seal, etc) is generated by subjecting document content to the 
secret key. Thereafter the mark is applied to the document 
and can be stored or printed out on hard copy. To authen- 
ticate a marked document, if the document is a hard copy, 
the document is scaimed into a computer to generate a digital 
document. After scanning or if the original document to be 
authenticated is a digital document, the mark is lifted from 
the digital document and used to regenerate a document 
corresponding to the mark using the public key of the person 
who supposedly approved the document via the mark. To 
this end, in a hospital facility, for example, all physician 
public keys may be stored on an Intranet and may be 
accessible for authentication purposes. 

After the public key corresponding to the physician who 
supposedly approved the document is used to expand the 
mark into a re-generated document, the original and regen- 
erated documents are compared to authenticate. This type of 
PKE system can clearly be used with the present invention 
to generate documents from watermarks for authentication 
purposes. 

Also, in accordance with the '567 patent, a hashing 
method can be used to encrypt, decrypt and authenticate a 
document. To this end, according to the present invention, 
after a standard mark (e.g. a signature picture) is added to a 
document, document content or a representative portion 
thereof may first be hashed using a hashing code and 
generating an initial document hash. Thereafter, the initial 
hash may be encrypted using a private encryption key to 
generate a watermark which is applied to the document. 

In this case, to authenticate, a watermark is identified on 
a document and is decrypted using a public encryption key 
to generate a re-generated hash. Next, a private key is used 
to again hash the document content generating a document 
hash. The document and re-generated hashes are thereafter 
compared to authenticate. 

It should be appreciated that while the inventive time 
dependent electronic watermark described herein is 
extremely advantageous in the medical records area to 
authenticate an approval indication, clearly, this invention 
can be used in any application where a digital approval must 
be provided- For example, where biUs are paid by electronic 
check, a users digital time dependent watermark can be 
provided on the electronic check, the mark generated in the 
manner described above. Similarly, a digital time dependent 
watermark could be provided when a credit card number is 
used to purdiase something over the Internet. In either of 
these two applications, instead of generating the watermark 
using an ICI), a terminal itself could be used to generate the 
mark and apply the mark to a terminal stored digital signa- 
ture. 

Referring to FIG. 29, an exemplary signature picture 949 
is illustrated and includes a scripted signature picture 953 
and pre-water marked border 951. Referring also to FIG. 30, 
a watermaiked signature picture 955 applied to an exem- 
plary document 957 in a designated approval field (phantom 
identified by numeral 959) is illustrated. Picture 955 
includes the signature picture 953 inside a watermarked 
boarder 622 digitally signed document 620 according to the 
present invention is illustrated. The exemplary document 
957 is a digital prescription which includes information 
which one would expect to find on a prescription. The 
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information includes a prescribing physidans name and In this case, if the physician has a hardcopy paper 

address 961, a patient's name and address 963, and a document which ^e would like to endorse, the physician 

prescription order 965 including medication prescribed, may sign the paper document via a pen and a handwritten 

amount and required administration frequency. In this case, signature. Then the signed document is scanned into the 

using a prescription software program, a physician fills in 5 computer via the scanner. Thereafter, it is envisioned that the 

the information on the document $57 via a terminal. Assum- computer retrieves the physician's private key, applies the 

ing the information is accurate the physician then request a private key to the document content (including the 

signature from the physician's ICD 10 at which point the signature) to generate a watermark and then applies the 

content of document 620 is transmitted to the ICD 10. watermark to a digital representation of the document. 

Referring again to FIG, 26, when the physician's ICD 10 Thereafter, the digital representation may be printed out 

receives the document, assuming the document content DC including the watermark or, in the alternative, the originally 

is less than the threshold requirement TDC, ICD 10 adds hand signed document may be provided to the printer input 

random text/numbers to the DC. Thereafter, at block 656 the and run through the printer to add the watermark to the 

physician's digital signatiire picture is added to the originally signed document In effect, the printer would only 

document, at block 658 the modified mark is generated, at print out the watermark which would be applied to the 

blocks 659 and 660 the modified mark is used to modify the signed document. 

digital signature picture and at block 662 the document 957, Subsequently, to authenticate the document the water- 

with the watermarked signature picture, is transmitted back mark is identified on the document and scaimed back into a 

to the terminal for review and if signed properly, for further terminal, the public key corre^nding to the physician's 

transmission to other network storage or processing devices. signature which appears on the document is retrieved and is 

After digitally '"signing" the document 957, the »gned 20 used to decrypt the watermark thereby generating a com- 

document is displayed and then transmitted to a server. plete copy of the document ^^ch could either be examined 

Thereafter, when the prescription is filled, the signed docu- on a computer display or printed out on hard copy for 

ment can be electronically returned to the physician stamped comparison to the original document, 

"filled". Then, to authenticate the prescription the authenti- According to yet another embodiment of the invention, a 

cate process described above can be performed. 25 physician's terminal may be equipped with a digital signa- 

In addition, it should be recognized that while a signature ^^^e pad for providing a (hgital signature. Digital sigriature 

block is very persomiel to a user and therefore is preferred P^. ^ well-known and have been extensively used m the 

inthepresentinventiontoconvey afeehngof responsibiUty l^^^^^^ digitally record purchaser s ^a- 

for the document to which the block is as<Tibed, any type of t'^'^'t pad mcludes a flat sensmg surface which 

, v; ?" Z't! " „ ^/ _ senses the position of a pen tip as the tip is moved along the 

personal idenUfier which can be pictonally represented may 30 action signal indicating tip posi- 

be marked usmg a content dq>endent ekctromc watermark. ^ ^^^^ ^ ^zo^nd^ to a computer which 

For example, even a smgle horizontal fine could be water- thereafter generates a "picture" of the pen tip movement, 

marked. Moreover, other types of inforaiation could be ^^^^ to script a signature, the picture 

marked with time dependent watermarks for authentication generated by the computer is the scripted signature. In this 

purposes. For example, a video clip could be so 35 case, it will also be assumed that the physician's private key 

watermarked, an audio cUp could be so watermarked and so is stored on a private terminal and public key is generally 

on. Furthermore, an electronic watermark can take any of available. 

several difierent forms sudi as, for instance, providing the In this case, assuming a document is displayed on a 

background to a signature field or indeed providing the computer display screen which a physician would like to 

background for an entire document. In the case where the 40 approve, it is envisioned that the physician selects an 

mark comprises the entire document background the entire approve icon on the display. Thereafter, the computer ter- 

background would have to be used during authentication to minal requests the physician to hand script a signature on the 

re-generate the document. digital pad. As the physician hand scripts the signature on 

Moreover, while the watermarking procedure has been the pad, the computer provides a digital represenUtion of the 

described as one wherein an entire document content is used 45 signatore in aii approval field on the displayed document, 

to generate a mark, in the alternative a document digest may , "^'P^^ is completed, the computer retrieves 

be used instead For example, referring again to FIG. 29, a ^^y^'^^ ^ ^u^^'^J^l' T"^*^ ""^'f docmient 

...j*^. 1 . cMj- ui using the pnvate key and thereby generates a watermark and 

digest may sunply include informanon filled ui on a check watermik to the dfeplayed document, the tnaric 

such as issues, date, amount and signature where a digest is . . -.u «i- j * ^ » a • ♦ 

* ' 1 . i_ • remaimna with the document when stored or pnnted out. 

used to generate a watermark, comparison to authenticate 50 . ^, ^. . . i • *u ™ ■ Tu „ • 

^ , . - . ^ ^ ... Authentication m this example is the same as m the previous 

compares only digest mformation, not an entire document. . ^ 

While the approval/authentication concepts of the present ^ 

invention were described above in the context of an ICD, the Vin. EXAMPLES 

inventk)n should not be so limited and is meant to cover ^ few examples of how the present invention is intended 

other embodiments. The most general aspect of the 55 to operate are instructive and aid in an understanding of why 

approval/authentication concepts is that a document which the invention is extremely advantageous. In each of the first 

has been approved by someone can be authenticated by four examples below, it will be assumed that both Penicillin 

using the document content. Other examples of how this and Tylenol are to be administered to a single patient within 

general concept can be implemented are helpfiil to under- g facility within a specific time period and in specific doses 

standing the fidl import of this invention. 60 by one of several authorized physicians. The patient is 

For example, according to another embodiment of the wearing an electronic identification bracelet like bracelet 40 

invention, a physician's terminal may be equipped with both 2 which has, in its memory, at least some and 

a scanner and a printer and, where the terminal is personal perhaps all of the information which is illustrated in FIG. 9. 
to the physician, the terminal may share the physician's 

private secret encryption key, the physician's pubhc encryp- 65 ^* E'^^P*^ ^ 

tion key accessible, via a LAN or the Uke, to other facility In a first example, it will be assumed that a physician's 

personnel. ICD 10 is relatively complex so that the ICD 10 itself is 
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capable of recognizing difTerent types of received ICD 10 does several things. Fiist, referring also to FIG. 6, 
information, building a server target address for the received processor 250 identifies the time at which the information 
information and providing configuration information for segment was received and hence the time at which lid 204 
displaying the received information via a browser screen on was opened via clock 254, processor 250 storing the iden- 
a display 103. Initially, referring also to FIG. 6, it will be 5 tified time as a time stamp segment. Here, it is assumed that 
assumed ICD 10 includes a physician identifying segment in medicine administered to the patient is administered a short 
memory 262 whidi identifies the physician associated with time after lid 204 is opened and therefore, administration 
the ICD 10. time is indicated by the time stamp segment. Second, 
In this case, initially, it wiU be assumed that two Penicillin processor 250 recognizes the received information segment 
capsules and a single Tylenol capsule are dispensed into a lO as a medication administration record and therefore auto- 
container like container200ilhistrated in FIG. 5. In addition, matically formats the received information and the time 
referring to FIG. 10, a programming device such as dose stamp segment as an information packet like the medication 
dispenser 150 (see FIG. 7) provides a di^nsation to administration packet ilhistrated in HG. 14A. 
processing device 75", device 75" storing received infbrma- In addition, ICD 10 uses received information to formu- 
tion in its memory. Moreover, dose dispenser 150 also 15 late a target address. To this end, in FIG. 14A, an exemplary 
generates a dispensation address for storing record 340. An target address is identified by numeral 444. Address 444 
exemplary dispensation record address 400 is illustrated in includes a facility field which indicates the same facility as 
FIG. 13. Address 400 inchides a field indicating the facility the dispensing facility (i.e. St Mary, Springfield, see also 
at which dispensation occurred (e.g. "St. Mary, FIG. 13A), a descriptor field (i.e. medication), an event field 
Springfield"), a descriptor field (e.g. "medication"), an event 20 (i.e. "given'O, a patient ID field (i.e. "987654321") and date 
field (e.g. "dispensed"), a patient ID field (e.g. and time fields (i.e. "May 19, 1996" and "13:42", 
"987654321"), a date field (e.g. "May 19, 1996") and a time respectively). 

field (e.g. "13:42"). All of the fields in address 400 are After lid 204 is opened, the physician removes a single 
generated by dispenser 150. Penicillin capsule and the Tylenol capsule leaving the see- 
As the physician makes her rounds, the physician even- ^ ond PenidUki capsule in container 200 and administers the 
tually visits the patient for which the Penicillin and Tylenol removed capsules to the patient. The physician recloses lid 
were dispensed. After an abbreviated examination, the phy- 200 which again locks and is routed back to the pharmacy 
sician elects to administer half (i.e. 1 capsule) of the dis- for reinventory. If desired, the physician may make a manual 
pensed Penicillin and the entire dose of dispensed Tylenol note indicating that only one Penicillin was administered 
(i.e. I capsule) to the patient. To administer the drugs the ^ (e.g. via dictation). 

physician must first gain access to the Penicillin and Tylenol After the physician completes her rounds, it will be 

by unlocking container lid 204. In this example, it will be assumed that the physician's ICD 10 includes ten informa- 

assumed that processing device 75" maintains lid 204 locked tion packets, each of which is similar to packet 440 in that 

until a specific set of information is received by device 75" gjch packet includes configuration information, a specific 

which matches information stored in the memory of device target address and some description information which 

75". Specifically, both patient identifying information which describes a medical event (e.g. patient identifier, physician 

matches similar information in FIG. 10 and physician iden- identifier, medication identifier, administration dateAime, 

tifying information which matches similar information in medication amount, etc.). In addition to the ten information 

FIG. 10 must be received by device 75". ^ packets, it is assumed ICD 10 forms an initial screen padcet 

Thus, to gain access to the contents of container 200, the which sununarizes ten information padcets and provides 

physidan places container 200 proximate the patient's interaction icons to facilitate physician review of the infor- 

braoelet 40 and causes the patient's bracelet to transmit mation packets. Referring to FIGS. 1 and 3, to transfer the 

patient identifying information (e.g. the patient identifica- initial screen packet and the information packets to system 

tion number) to transceiver 81" on device 75". In this 194, the physician first gains access to a terminal 60 in one 

example this is accomplished by pressing an activation of the manners indicated above which is supported by the 

button (not illustrated) on device 75*in FIG. 2. A short time terminal 60. For example, the physician may position her 

thereafter, the physidan places container 200 proximate ICD badge proximate input device 64 at which lime device 64 

10 and causes ICD 10 to transmit physidan identifying and terminal 60 generally interrogate ICD 10 to determine if 

information to transceiver 81" by pressing button 18. the physidan assodated therewith is authorized to access the 

When device 75" receives the patient and physidan terminal 60. 

identifying information, device 75" compares the received After the physician gains access to terminal 60, the 

information with similar information stored in the memory physidan again positions ICD 10 proximate input device 64 

of device 75". Where the received and stored information is and causes ICD 10 to transmit all ten information packets to 

not identical, device 75" maintains lid 204 locked and may 55 terminal 60 via device 64. When the packets are received, 

indicate a mismatch by generating an audible sound via browser 115 initially displays an initial screen which is 

device 87". However, if the received and stored information configured in accordance with the instructions provided in 

is identical, device 75" allows fid 204 to be opened by the initial screen packet. To this end, the initial screen 

pressing button 228. Device 87" may generate a different indicates the number of information packets received and 

audible souikI indicating the match. Audible alerting device 50 displays the interaction icons. The interactive icons are 

87" may also serve to remind a physidan when it is time to assumed to be REVIEW and STORE icons, 

administer the enclosed treatment It is contemplated that a first physician might collect 

In addition to facilitating opening of lid 204, when button information packets via a first ICD 10 and a second physi- 

228 is pressed device 75" transmits all of the information dan might access a terminal 60 via a second ICD 10 to 

illustrated in FIG. 10 as an information segment to ICD 10. 65 review, modify and approve descriptive information in infor- 

This transmission can be in any form which is recognizable mation packets assodated with the first ICD 10. Thus, after 

by ICD 10. When ICD 10 receives the information segment, gaining terminal access via the second ICD 10, the infor- 
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matioD packets in the first ICD 10 are transmitted to the address. Thereafter, the physician can modify di^layed 

terminal 60 for review. In this regard, the terminal 60 may, information and then approve the infonnation by selecting 

after being accessed and receiving information packets, the APPROVAL icon. 

either allow the second physician to review, modify and in the present example, the physician consults her hand 

approve the packets or may blodc the second physician from 5 written notes and confirms that only half of the dispensed 

one or all of the review, modifying and/or approval abilities. Penicillin was administered. Because the physician changed 

In most cases, it does not make sense for a physician who the amount of Penicillin administered to the patient from 

did not perform an examination to review, modify and two capsules to one, the physician must modify the peni- 

approve information packets as the second physician likely cillin dose ^liich is displayed To do this the physician 

would not know the specifics of an examination. For selects the dose amount which causes a pull down menu to 

example, in the present case where a first physician elected open up providing the physician with other options (e.g. 1.5 

to administer only one of two dispensed Penicillin c^ules, capsules, 1 capsule, etc.) The physician selects one of the 

the second physician would have no way of knowing that the other options (Le. in this case 1) and the menu closes as the 

first physician changed the prescription. Thus, if the second dose amount is modified. 

physician approved the information packet which indicates 15 when the APPROVAL icon is selected, browser 115 

two Penicillin capsules were administered, the stored data transmits the approved information and associated hidden 

would be erroneous. information to the server target address associated with the 

To determine if a terminal accessing physician is the same APPROVAL icon. After the first packet information has 

physician who acquired infonnation padeets, the terminal been approved, preferably the browser automatically pre- 

60, when accessed stored an accessing physician identifier. ^ sents the information in the next consecutive information 

Then, when information packets are received frx)m a second packet via dii^lay 103. Again, the physician can quickly 

physician's ICD 10, terminal 60 identifies the administering review the information, modify the information if necessary 

physician associated with the packets (e.g. the physician and approve the information for storage, 

associated with the second ICD) and stores an administering Thus, it ^ould be appreciated that, using the inventive 

physician identifier. Next, terminal 60 compares the access- icD 10 to collect information, configure browser screens 

ing and administering physician identifiers, where the and provide server target addresses for collected information 

accessing and administering physician identifiers are streamlines the information gathering process and also 

identical, terminal 60 allows information packet review as streamlines the process of downloading information from 

described hereinafter. ^ such a device to a terminal for viewing, modification and 

However, where the accessing and administering physi- approval, 

cian identifiers are not identical, terminal 60 may do one of in addition, by adding physician identification informa- 

several things first. First, terminal 60 may simply indicate tion to an information padcet a record of medical adminis- 

that the accessing physician cannot review, modify or tration information is formed. Moreover, by requiring an 

approve the information packets and thereafter may termi- authorized physician to approve descriptive information 

nate access to the terminal 60. which characterizes a medical event and identifying the 

Second, terminal 60 may allow the accessing physician to approving physician in the descriptive information prior to 

review the information packets but may not faciUtate modi- long term storage, not only is the information review process 

fication and approval functionality. Restricting the accessing easier and therefore more likely to be completed, the review 

physician in either of these first two way goes a long way to ^ process figuratively assumes "ownership" of approved data 

ensure that information transmitted to long term storage to the approving physician, thereby adding import to the 

truly reflects an associated medical event. approval process. In addition, by adding approving physi- 

Third, terminal 60 may add the accessing physician cian identification to the descriptive information or by 

identifier to the descriptive information in the information adding a physician's watermarked digital signature to 

packet and thereafter allow the accessing physician fiill 45 record, a complete audit trail for descriptive information is 

review, edit and approve abilities. Then, when the descrip- provided, 
live information is stored, the accessing physician identifier 

is included therewith so that a complete audit trail for each xamp e 

information packet is formed. In addition, if desired, termi- In this second example, it will be assim:ied that a physi- 

nal 60 may also maintain an unmodified information packet 50 cian's ICD 10 is relatively simple in that the ICD 10 cannot 

for storage with each information packet which is modified itself formulate target server addresses or HTML configu- 

by an accessing physician who is not an administering ration information and caimot generate most descriptive 

physician. In this maimer, if modified descriptive informa- information (e.g. date and time stamp segments). Instead, in 

tion is erroneous, a record of unmodified descriptive infor- this example, address, configuration and most descriptive 

mation can still be accessed for review. 55 information is provided to ICD 10 by other system devices. 

Continuing, assuming the physician elects to review the In this example, like the preceding example, it will be 

descriptive information in the information packets and is assumed that two Penicillin capsules and a single Tylenol 

authorized to review, modify and approve packets, the capsule are dispensed into a container like container 200. 

physician selects the REVIEW icon. It will be assumed that However, in this case, in addition to providing the informa- 

the initial packet to review is the medication administration 60 tion illustrated in FIG. 10, dose di^nser 150 includes a 

packet described above. When the physician selects the specifier apparatus (see 64 in FIG. 3) which also provides a 

packet, browser 115 configures the browser screen as indi- server target address and browser screen configuration infor- 

cated by the configuration information stored in the packet mation in HTML code to container device 75" (see FIG. 5). 

and displays the descriptive information. In addition. For example, referring again to FIG. 14 A, in this example, 

browser 115 di^lays hyperlinks in instances when the 65 virtually all of the HTML code illustrated, including format 

configuration information so instructs and di^lays a hyper- field information, would be provided by dispenser 150 

link for the APPROVAL icon which indicates the target except for descriptive portions of some fields. Thus, for 
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example, io field 444, the portion whidi reads "given" along tenninal and downloads information packets to a browser 

with the patient identification number, date and time, would for review, modification and approval prior to storage, 
not be provided. Similarly, in field 452, verification "YES" This second example is advantageous because ICD 10 and 

would not be provided Moreover, the administering physi- other smart devices (e.g. container 200) need not be able to 
cian in field 464 would not be provided. 5 facilitate complex computations and formatting procedures. 

To form the incomplete packet, dispenser 150 may be Instead, ICD 10 and anart devices, at most, must fill in a few 

equipped with special software for generating appropriate descriptive fields and basically act as information storage 

HTML code or, in the alternative, dispenser 150 may be buffers. In addition, this second example is advantageous 

linked to a server for generating the HTML code. Referring because a dispenser 150 can specify a target address for 

to FIG. 7, in the present example, it is advantageous if returned information and how information which is returned 

dispenser 150 is linked to pharmacy server 186 for receiving to a terminal should be configured for review. This should 

pharmacy information related to ordered prescriptions. In facilitate a more flexible system. Moreover, the ICD 10 and 

addition, by being linked to the pharmacy server 186, when other smart devices are relatively inexpensive as less remote 

ICD 10 returns information to server 186 after dispensation computing power is required. 

and approval, dispenser 150 may access the returned infor- 15 addition, in this second example, as indicated above, 

mation to confirm dispensation and if dispensation did not dispenser 150 can close the information loop by tracking 

occur or a prescription was changed, dispenser 150 may information returned to the pharmacy server 186 via ICD 10 

indicate so via an alarm or some form of quality control and comparing that information to prescriptions which were 

reporting. lo be administered. To this end, in addition to including the 

As in the previous example, when Penicillin and Tylenol ^ components illustrated in FIG, 3, the di^nser processor 

are placed inside container 200, container 200 is positioned also includes a clock (not illustrated). In addition to indi- 

proximate a transceiver associated with dispenser 150 and eating medication to be dispensed each prescription includes 

dispensation information is transmitted to container device a prescribed administration period such as "between 2-3 

75" via the dispenser specifier apparatus or output device 64 PM" which is accessed by the dispenser 150 processor for 
(see FIG. 3). In this case, however, transmitted information ^ each drug dispensed. When the drug is di^nsed, the 

includes the entire packet 440, less the descriptive infonna- processor identifies the required administration period. For 

tion (e.g. receiving patient i.d., date, time, administering each prescription, at the end of the administration period or 

physician, etc.). at the end of some predetermined reporting period (e.g. 2 

Again, it is assumed that when the physician visits the hours) following the end of an administration period, the 
patient for whom the Penicillin and Tylenol were dispensed, ^ dispenser processor retrieves any data corresponding to a 
the physician elects to administer only one c^sule each of specific prescription vAndb was returned by an ICD and also 
Penicillin and Tylenol. Once again, to gain access to the recognizes the absence of such data, 
capsules, the physidan performs a specific procedure to Where no data for a specific prescription has been pro- 
open lid 204 whereby device 75" receives patient and vided by an ICD, the dispenser 150 may do any of several 
physician identifying information, compares the information different things. First, the dispenser 150 may indicate via a 
to similar information stored in the memory of device 75" dispenser display (see 103 in FIG. 3) that administration 
and facilitates unlocking of lid 204 only when there is a potentially was not performed. In addition, di^nser 150 
precise information match. - may also periodically generate an audible "chirp" via indi- 

In addition, if a precise information match occurs, refer- ^ cator (i.e. alarm) HI. In the alternative, some other indicat- 

ring again to FIG. 14A, device 75" fills in various blank ing mechanism such as an e-mail or pager signal may be 

portions of packet 440 including verification field 452. It is generated to inform a physician or attending nurse of a 

assimied that when lid 204 is unlocked, drugs therein are potential mismedication. Still further, the dispenser proces- 

administered to the patient associated with the patient iden- sor may simply generate a record indicating possible mis- 

tification number which was received by device 75". medication. Subsequently, if ICD prescription data for the 

Therefore, device 75" fills in the patient identification num- specific prescription is provided the indications may be 

ber in field 444 further defining the target address. It is also automatically halted. 

assumed that the physician who opens lid 204 administers At the end of a prescribed administration or reporting 

the drugs and therefore physician identifying information is period, if data for a specific prescription has been provided 

filled in field 464. the di^nser 150 may retrieve the data and compare the data 

After lid 204 is unlocked, when a physician presses button to the original prescription. In the present case where the 

228 to open lid 204, device 75" identifies the current date administered medication was modified and therefore does 

and time and provides that information both in the target not match the prescription exactly, it is contemplated that 

address (in field 444) and in field 468 (i.e. the time stamp). dispenser 150 generates a prescription/administration (P/A) 
At this point packet 440 is complete as illustrated in FIG. 55 quality control modification report indicating that the drugs 

14A. administered were in fact different than those prescribed. In 

Assuming device 75" is proximate the physician's ICD addition the P/A report may also indicate matching prescrip- 

10, once packet 440 is complete, device 75" transmits entire tions and administrations. 

complete packet 440, including HTML code specifying The di^nser reports may be provided to an attending 
target addresses and screen configuration, to ICD 10. When 60 pharmacist for daily or weekly review or to a physician for 

ICD 10 successfidly receives an information packet, ICD 10 review or indeed to an administrator or the like to track 

may generate an audible signal or a visual signal (e.g. administration efiGciency and accuracy, 
activate an LED to indicate successful reception. ICD 10 

simply stores packet 440 until caused to transmit packet 440 ^- Example 3 

to a terminal 60 for review, modification and approval. 65 In this third example, it will be assumed that an ICD 10 

The remainder of this example, is similar to the example is a hybrid of the ICDs in the above examples in that each 

above. Thus, after her rounds, the physician accesses a ICD has less computing ability than the ICDs in the first 
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example and more computing ability than the ICDs in the mation is provided to the smart devices and ICD 10 by other 

second example. In this example, it will be assumed that system devices and that the smart devices and ICD 10 

some of the HTML code for configuring a browser and simply provide descriptive information during a patient 

providing browser addresses is provided to ICD 10 and that visit In this example, to facilitate information review, a 

ICD 10 generates the remainder of required information and 5 simple software package is provided on each terminal 60 

at least some of the descriptive information. which receives the minimal configuration information, cor- 

In this example, like the preceding examples, it is relates the minimal configuration inforaaation with a more 
assumed that two Penicillin capsules and a single Tylenol detailed configuration format, and provides the detailed 
capsule are dispensed into a container like container 200. In formal for browser configuration control, 
this example, dispenser 150 provides an HTML dispensation 10 in this example, as in the second example above, dose 
information packet in HTML to device 75" which includes dispenser 150 provides a server target address and browser 
information for configuring browser 115 screens to indicate server configuration information to a smart container device 
dispensation information. To this end, referring to FIG. 13B, 75" when Penicillin and Tylenol are disused into a oon- 
an exemplary dispensation information packet 404 is illus- tainer 200. However, unlike in the second example where 
trated. Referring also to FIG. 13C, a browser screen 412 15 screen configuration information is provided in HTML code, 
which corresponds to packet 404 is illustrated including in this example a simple configuration indicator code is 
hypertext links 416 ami 420, respectively, to a patient's provided which can later be expanded into more detailed 
demographic record and the bibliographic record of the HTML code for configuration. For example, the simple 
physician who dispensed the medication. Packet 404 is configuration indicator may be as simple as a single char- 
formatted according to HTML and uniform resource locator- '20 acter or number. In this case, assuming there are only ten 
(URL) conventions. FIG. 13C illustrates the medication possible screen configurations for viewing descriptive infor- 
dispensation record 404 as it is displayed by a browser 412, mation packet information, each of the ten possible configu- 
FIG. 13A illustrates the URL 400 generated for the medi- rations is associated with a different number indicator 0 
cation dispensation record 404 which identifies the location through 9. In the present example, it will be assumed that a 
at v^ch it is or will be stored. 25 screen configuration for reviewing descriptive information 

In this example, prior to disusing a dose to a container in a medication administration information packet is iden- 

200, a physician reviews dispensation information via tified by number indicator 4. In this case, in addition to 

screen 412. If dispensation information is correct, the phy- receiving a target address upon medicine dispensation, oon- 

sician approves the information and packet 404 is transmit- tainer device 75" also receives indicator 4 which is stored for 

ted to container 200. ^ later transmission to ICD 10. 

Again, it is assumed that when the physician visits the When lid 204 is unlocked so that the physician can 

patient for whom the Penicillin and Tylenol were dispensed, administer the medicine therein, device 75" identifies 

the physician elects to administer only one capsule each of descriptive information and provides the descriptive 

Penicillin and Tylenol. Once again, to gain access to the information, target address and screen configuration number 

capsules, the physician performs a specific procedure to '^^ indicator (i.e. "4") to ICD 10. ICD 10 stores the received 

open lid 204 whereby device 75" receives patient and information as a packet until caused to transmit the packet 

physician identifying iiiformation, compares the information to a terminal 60. 

to similar information stored in the memory of device 75" in addition to storing the described information packets, 

and facilitates unlocking of lid 204 only when there is a ^ it is also assumed ICD 10 also generates a dynamic initial 

precise information match. screen indicator to provide dynamic information to browser 

As in the first example, when button 18 on ICD 10 is 115 for display via the initial screen. To this end, it has been 

pressed, ICD 10 identifies the time and date and stores that recognized that generally the initial screen will often include 

information as an time stamp segment for placement in a essentially the same information. For example, a typical 

subsequently formed information packet initial screen will often only include an indicator to identify 

After Ikl 204 is unlocked, when a physician presses button the number of files to be reviewed and perhaps a small 

228 to open lid 204, assuming device 75" is proximate the number of indicators indicating the types of files to be 

physician's ICD 10, device 75" transmits packet 404 (i.e. the reviewed (e.g. billing, dispersion, monitored information, 

HTML dispensation information packet in FIG. 13B) to ICD dicUtion, etc.). Assuming a simple initial screen which only 

10. When ICD 10 receives packet 404, ICD 10 modifies 50 displays the number of files to review and icons to select 

packet 404 by adding descriptive information, additional review or store options, the dynamic initial screen indicator 

browser screen formatting information, formulating a spe- is simply a number. Assuming 10 files arc stored in an ICD 

cific target address and providing configuration information after a physician makes her rounds, the screen indicator is 

for interaction icons as indicated atx)ve, thereby generating 10. 

a completed information packet like exemplary packet 440 55 After the physician completes her roiinds, the physician 

in FIG. 14A. gains access to a terminal 60 in the manner described above. 

The remainder of this example, is similar to the examples After the physician gains access and activates ICD 10 to 

above. Thus, after her rounds, the physician accesses a transmit stored data to a terminal 60, ICD 10 transmits the 

terminal and downloads information packets to a browser initial screen indicator (e.g. 10) and the information packets, 

for review, modification and approval prior to storage. 60 When the transmitted information is received, terminal 

processor 107 performs several functions. First, processor 

D. Example 4 dissects each information padcet thereby identifying. 

In this fourth example, it will be assumed that all smart with respect to each packet, a target address, descriptive 

devices and the ICD 10 are extremely simple in that none of information and the screen configuration number indicator, 

the devices is capable of formulating or storing complex and 65 Processor 107 uses the number indicator to identify a screen 

complete screen configuration information. Instead, it is configuration for displaying associated descriptive informa- 

assumed that target address and minimal configuration infor- tion and forms an HTML packet like 440 (see FIG. 14A) for 
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each received packet, filliiig in descriptive iofonnatioo A typical IV packet might include a period indicator 

where appropriate. Each HTML packet is then stored in which indicates the monitored time period (e.g. previotis 

RAM 109. four houis) which corresponds to the dynamic data in the 

Second, processor 107 identifies the initial screen indica- packet and a delivery rate field which indicates the rate of 

tor and fills in an appropriate field in an initial screen 5 medicine delivered by IV device 116*. Where the delivery 

configuration. Then the initial screen is configured to enable rate dianged over the most recently monitored time period, 

a physician to review the descrq)tive information packet the delivery rate field may include several medicine rate 

information. In the present example, because the initial indicators which are each correlated with a delivery period 

screen indicator is 10 (e.g. there are 10 files to be reviewed), over which the specific rate was provided. In the alternative, 

the initial screen indicates "There are 10 files to review" and lO the rates may be provided in other forms such as a graph of 

provides REVIEW and STORE icons. rate versus time. In addition, the IV packet will also include 

Hie remainder of this example is similar to the examples * medication field indicating the medication di^nsed via 

above. Thus, the physician can review, modify and approve ^» ^ physician who authorized the medication, the 

information in each file stored in RAM 109. P^^^"^ ^ so on. Ftoher more, the IV packet will also 

THis embodiment is advantageous in that most of the mckde ajhj^^^^^ 

formatting capability can be provided in a terminal 60 as ^ ° acquire e pac e 

opposed to an ICD 10 as other smart devices. This is As in the previous examples, when a physician completes 

advantageous as it is contemplated that, in a typical facility, her rounds, the physician gains access to a terminal 60 and 

there will be many more ICDs and smart devices than there transfers information packets, including the IV padtet, to the 

will be terminals 60. Nevertheless, consistent with the ^ terminal browser 115. Once again, the receiving browser 

present invention, this embodiment still has the advantage of identifies initial screen configuration information indicating 

specifying target addresses via an ICD 10, instead of a server 'he number of files transmitted to terminal 60 and di^lays 

and specifying browser screen configuration albeit in an the initial screen, including REVIEW and STORE icons, 

abbreviated format. Assuming the physician selects the REVIEW icon, ter- 

^ minal 60 displays the first information packet in the asso- 

E. Example 5 dated configuration format. As above, the IV information is 

In this fifth example, instead of interacting with a smart displayed for review, in a format which is specially config- 

container 200, referring to FIGS. 1 and 4, it will be assumed i»red to display IV information. Although editing tools for 

that a smart IV treatment device 116' which, in addition to modifying displayed IV informaUon may be provided, such 

including an IV pump and proper patient linkage hardware, tools probably would not be provided as the IV information 

inchides the hardware ilhistrated in FIG. 19, is provided in simply reports actual medicine admimstralion and could not 

a patient's room 104. In addition, it will be assumed that the have been modified by a physician arriving for a visit after 

patient has been linked to the IV pump for several days and administration occurred. An APPROVAL icon allows the 

that a physician visits the patient's room to monitor patient 3^ physician to approve the IV information for storage at the 

condition and generate a report every 4 hours. Thus, a new target address. 

patient record is generated every four hours. While this smart IV example is relatively simple, this 

In this example, as in the second example above, it will be example illustrates that the invention may be used with any 

assumed that ICD 10 is relatively simple in that most data is type of anart device to remotely collect data and generate an 

collected from IV device 116', and not generated. To this 40 ultimate target address and screen configuration data. The 

end, in addition to providing a dispensation information important aspect of a smart device is that the device can 

segment record indicating medicine dispersion since the monitor some quantifiable information which is associated 

most recent data acquisition (e.g. four hours earlier), device with a patient and which is advantageous to collect and store 

116* also generates a target address for the dispensation for later retrieval, 

record and browser screen configuration information indi- 45 F F 1 fi 

eating how a browser screen should be configured for data P ^ 

review. The dispensation information segment and address Referring again to FIG. 1, in this sixth example of how the 

are assembled into an HTML information packet which present invention might operate it will be assumed that a 

includes several incomplete descriptive fields including a physician's ICD 10 is equipped to receive audio information 

patient ID field, a time and date field and a physician ID 50 (e.g. voice) via digitizer 22 when dictation button 26 is 

field. pressed. Thus, during a patient visit, a physician may use 

When a physician visits the patient linked to device 116', ICD 10 to take audio notes, 

the physician establishes a patient association with ICD 10 To this end, at the beginning of a patient visit, a physi- 

as indicated above, the patient association stored as a packet cian's ICD 10 identifies the patient by communicating with 

identification segment After the patient association has been 55 the patient's bracelet 40 (see FIG. 2) and, after forming a 

established, the physician causes device 116' to transmit the patient association, stores patient identifying information as 

incomplete packet to ICD 10. a patient identification segment. In addition, ICD 10 also 

When the incomplete information packet is received, if stores a physician identification segment indicating the 

the time is not aheady identified in the received information, physician associated with the ICD. When the physician 

ICD 10 identifies the time and date of reception. ICD 10 60 wants to form an audio note, the physician presses button 26 

places the time and date of reception, patient identifying and thereafter speaks in the vicinity of digitizer 22. 

information indicating the patient who received the IV When button 26 is pressed, ICD 10 recognizes that audio 

medication (i.e. patient identified in the patient identification information is to be received and performs several different 

segment) and physician identifying information indicating fiinctions. First, ICD 10 automatically generates a target 

the physician with whom ICD 10 is associated, in appro- 65 address for audio information to be received. The target 

priate information packet fields thereby completing an address specifies a server used by a facility transcription 

ETTMLpacketsimilar to packet 440 illustrated in FIG. 14A. pool. The transcription pool server is where all digital 
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dictation is stored which is then transcribed either manually ing or indicating buttons "Pharmacy" 219, "BiUing" 221, 

by facility personnel or automaticaDy by transcription soft- "Personal" 223 and "Transcription" 225, a processor 250 

ware. For the purpose of the present invention it will be (see FIG. 6) which is capable of configuring target addresses 

assumed that transcr^jtion is manual. ^ screen configuration information and is capable of 

In addition to generating the target address, ICD 10 5 ?f°*;^g dc^riptive information (e.g^ physician 

•J ^- J J * u -i. . 1 4 identifying information, time and date, etc.). An optional 

identifies the time and date which are stored together as a r„, '-II ^u^^Ia a^*^ « 

. »* . 5 « screen 231 for viewmg either collected data or a target 

time stamp segment. Moreover, ICD 10 automabcaUy gen- ^ ^ provided. 

erates an incomplete au(Mo information packet inchiding ^ ,^ ,^ 201, it is envisioned that, by 

browser screen configuration mfori^^^^ selecting one of the specifying buttons 219, 221 223 or 225, 

identifymg and physician Identifying fields and fills lO ^ ^y^^^^^ generaUy select the target address for 

time and identifying fields with mformation from the time subsequent dicUtion. In addition, as with a conventional 

stamp, patient identifying and physician identifying seg- dictation device, by providing editing buttons on ICD 201, 

ments. The only field which is not completed in this example a physician can correct dictation immediately if desired. 

is an audio dicUtion field which is to receive the digital When a physician stops to visit a patient during her rounds 

audio information upon reception. In addition to generating 15 ^ ^ ^ dictate a note which should be provided to 

the padcet descrft)ed above, the ICD 10 may also generate a specific facility department, the physician first selects an 

browser formatting information to formulate ^)ecific types appropriate department for receiving the note. For example, 

of templates to be filled in by a member of the transcription if the note is for the pharmacy to prescribe a specific 

pool. For example, the templates could include a template medicine for a patient at a specific time, the physician 

for a typical patient visit, a template for a prescription to be ^ presses button 219. When button 219 is pressed, ICD 201 

filled and so on. After the audio information packet is generates an incomplete audio information packet which 

formed, ICD 10 stands ready to receive audio information specifies, in ^propriate fields, a visited patient, a visiting 

via digitizer 22. physician, time and date and a target address which specifies 

Tir*u u «* J a. *u u i '.u* the pharmacy server. Once again, the ocdy field which is not 

Wth button 26 pressed, when the physician speaks within j . j * • r ij & .i. u * * 

.... r 5- J 'j't *u 25 filled is the audio information field. Thereafter, the physiaan 

the vicinity of digitizer 22, digitizer 22 receives the ... . „ j ^miff * J- * . 

, f. j-^ *- J * *i. J- A uses editmg buttons 207, 204, 211 and 215 to dictate an 

dictation, digitizes the dictation and stores the digitized . , , t. • j -/h j j - j- 

• £■ J J- 1^ A* *u J t *u mtended note which is digitally recorded m the audio 

mformation m the audio dictation field. At the end of the information field 

dictation, the physician stops pressing button 26. In the ^ ^ ^ * • . - i 
example, if. prior to ICD 10 forming a oew patient After her rounds, the physician accesses a termmal. 
association, the physician again presses button 26 to dictate ^ trai^mits mformation packets and edits and approves the 
again, the subsequent dictation is stored in sequence at the packets. With respect to the audio mformaUon packet tar- 
end of the audio dictation field. Once a new patient asso- ^^^S. the pharma^ server addres^ when the audio infor- 
ciation is formed, when button 26 is pressed, a new audio """Jo" aPP«>ved. instead of going to the transcnpuon 
information packet is generated. P°°^ •he mformation is Uansmitted to the pharmacy server. 

In the case of an audio information packet, among other '° "|f 'J^^'ive, ICD 10 may be configured such that 

things, the configuration information will configure a ■""'^.'han a smgle server address can be sekotoi by oon- 

biT«S^r screen which identifies time and date of dictation. ssoitively piessmg rnore than one button 219. 221. 223 or 

dictating physician and patient visited. In addition, the ^25 or. so ttiat all dictatton. in addition to bemg provided to 

configuration information may also provide intemction ^ the selwted server, is also provided to the transcnpU^ 

. « • • L • • ^ 1 i_ 1 J ^ server (or some other server for that matter), 

icons to allow a reviewmg physician to play back and W lkji mat mai^w^. 

perhaps edit dictation. For example, interaction icons may G. Example 7 

inchide "PLAY", "STOP". "REWIND", "ERASE". "FAST ,„ ^ embodiment of the present invention, in 

FORWARjy and so on. addition to collecting audio information and other informa- 

After a physician completes her rounds, as in the previous 45 tion which is provided by other smart devices (e.g. patient 

examples the physician gains access to a terminal 60 and 10 number, dispensed drug type and amount, etc.) an ICD is 

transmits an initial screen configuration packet and other equipped to collect video information. To this end, referring 

information packets, including the audio information packet to FIG. 21, an exemplary video equipped ICD 301 includes 

described above, to the terminal 60. Browser 115 receives all a main body housing 303 in which a processor and other 

the packets, stores the information packets and configures jq already described hardware (see FIG. 6) is housed. Most 

the initial browser screen as instructed by the initial screen importanUy, the other hardware includes a clock and a 

configuration packet. memory (both audio, video and other information) in wtiich 

As the physician reviews the information padtets, even- user identification information is stored. In addition, ICD 

tually the physician selects the above audio information 301 includes conventional video editing buttons "Play" 305, 

packet for review. When the audio information packet is 55 "Record" 307, "Reverse" 309, "Fast Forward" 311 and 

selected, browser 115 displays the descriptive information in "Stop" 313 which are linked to the ICD processor to 

the audio information packet including the interaction icons. facilitate recording, reviewing and erasing of video and 

The physician can review the audio information packet via audio information. 

the icons and, if necessary, may correct the dictation via Moreover, ICD 301 also includes a video lens 315, a 

some suitable means (not illustrated). 50 video viewer 317 which is pivotally attached to housing 303 

A second dictation facilitating ICD 201 is illustrated in and an audio digitizer (e.g. digital microphone) 319 for 

FIG. 20. ICD 201 is similar to a conventional digital detecting audio signals. As with all ICDs described herein, 

dictaphone in that ICD 201 is a hand held device including ICD 301 also includes a transceiver 321 which can both 

an audio digitizer 203, a speaker 206 and conventional receive information fit>m smart devices and transmit infor- 

editing buttons, "Play" 207, "Record" 209, "Reverse" 211, 65 mation to smart devices and to a terminal. In addition, other 

"Fast Forward" 213 and "Stop" 215. In addition, however, data collecting devices may be provided such as a bar code 

ICD 201 includes a transceiver 217, target address specify- reader 323. 
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Furthermore, ICD 301 also includes a toggle button 525. After the physidaD completes the examinatioD, the phy- 

It is envisioned that, as with the audio ICD illustrated in and sician may review the video clip via viewer 317. If the 

described with reference to FIG. 20, ICD 301 may be used physician determines that the clip may be use&d, the pby- 

to select a specific facility department to vAndb collected sician may, prior to reviewing the clip again, use button 324 
data (e.g. video and audio) should be provided. In this 5 to select a target server. It will be assumed the physician 

example, the capabilities of viewer 317 are used in conjunc- selects a personal archive server as the target server so that 

tioD with toggle button 325 to select specific target facility the physician can review the clipping later with the aid of 

departments. To this end, it is envisioned that where no other medical references in her office. Then, with a target server 

server is selected, a facility video archive department and selected, it is envisioned that any video reviewed will be 
associated server are selected as a default target for the lo earmarked for building a target server address. Thus, if a clip 

purposes of generating a target address for collected infor- is 10 seconds long, the physician may only review a 4 

mation. Thus, if a user does not select a different target second clip, thereby selecting the 4 second clip for delivery 

server, ICD 301 generates a target address specifying the to the target server. 

archive server. In addition, if desired, by selecting another server via 

To select a different target server, a user looks into viewer button 325 and reviewing the dip again, the physician can 

317. At the bottom of a displayed screen, a server irxlicator select a second server for building yet another target address 

is displayed, the currently selected target server specified for the clip. 

thereat. Thus, initially the server indicator indicates After her rounds, the physician accesses a terminal, 
"Archive Server". To select a different target server, the user transmits information padcets, including or not including 
depresses button 325 once which causes the target server to 20 yi^^f^^ depending on what the physician selected, and edits 
change and causes the server indicator lo also change and approves the packets. In this regard, in addition to 
accordingly. For example, pressing button 325 once may inchiding the typical HTML formatting information indi- 
change the server indicator from "Archive Server" to "Phar- cated above with respect to the other examples^ the packets 
macy Server". By pressing button 325 a second time the including video clips provide icons and a viewing window 
server indicator observable through viewer 317 again 25 ^ enable the physician to observe and perhaps edit ear- 
changes to indicate another possible target server (e.g. marked video clips prior to storage to a server. 
"Billing Server-O. Where there are five possible servers, any ^ ^x^plc of how video capable ICD 301 might 
of the five servers can be selected by releasmg button 325 operate, instead of being used in a medical faciUty, it wiU be 
once the desired server is mdicated by the server mdicator. ^^^^ ICD 301 is used in a jet and maintenance faciUty 
To return to the imUal default "Ardiive Server", the user 30 ^ ^^^.^^ ^^^^^ example, the ICD user is a 
simply scrolls through the server dioices and, after the last maintenance technician. It will also be assumed that many 
choice has been displayed, the next time button 325 is components include unique bar codes for identifying 
pressed, the default server is again selected. component parts. For example, a right wing rudder may 

In addition, it is envisioned that, in addition to enabling include a bar code identifying the rudder as a right wing 

selection of a specific target server, one dioice provided by rudder. In addition, the code for a particular jet's right wing 

toggle switch 325 should be "No server" so that while rudder may indicate the specific rudder components instead 

information can be collected, no server has to be selected of simply a right wing rudder. For example, the code may 

during data collection. Then, if the user desires, the user indicate "right wing rudder #8821475" so that the ^cific 

may, while reviewing a video chp via viewer 317, select any rudder and its history can be tracked, 

portion of the clip for delivery to a ^cific server. addition, each jet will typically be equipped with a jet 

Two examples of how ICD 301 might operate are pro- specific bar code. While the bar codes may be provided on 

vided hereinafter. In a first example, in a medical facility, separate jet components, more typically, a maintenance 

when a physician makes her rounds and visits a patient, ICD technician will have a bar code binder or notebook which, 

301 can be used as described above with respect to the for a particular jet. Lists all components and the component 

preceding examples to establish an association with a spe- specific bar codes. Thus, the binder would iiKlude an entry 

cific patient through any of several different interrogation "right wind rudder #8821475" which corre^nds to the 

protocols. After association has been established, ICD 301 specific jet During routine maintenance dieck-ups, the 

begins to build a conventional target server address using the technician is required to carry ICD 301 to collect iriforma- 

physician's ID information, patient ID information, time and tion for a maintenance report. 

date (from the ICD clock, not illustrated). In addition, if IV During a check-up the technician would first use ICD 301 

information or drug dispensing information is collected, that ^ establish an association between the jet being examined 

information is automatically formatted for subsequent deliv- ^nd the ICD 301. To this end, initially the technician uses 

ery to a terminal for viewing and further delivery to an ICD 301 to read the jet specifying bar code for the jet or the 

appropriate server address indicated by the target address. ^,ecific binder via reader 323. When the code is read. 

Assuming some peculiar visible symptoms are observed, ICD 301 stores the code and identifies the time and date. At 

the physician can use ICD 301 to record video of the this point ICD can already formulate a good portion of a 

symptoms for archiving and subsequent diagnosis. For target server address for the technicians report As the 

example, j£ a physician observes a rash about a patient's technician examines the jet, the technician can use ICD 301 
elbow which the physician does not recognize as a symptom ^ to take dictation and identify other specific components via 

of the patient's kiK)WD condition, the physician can collect corresponding bar codes from the binder, 

a video clip to illustrate the rash. While collecting the clip, when the technician observes the right rudder, it will be 

the physician can dictate an audio note explaining the ra^. assumed that the technician observes a small pimcture in the 

Prior to collecting the chp, the physician uses toggle outside skin of the rudder. To document the puncture and 
button 325 to scroll through target server choices. Initially it 65 subsequently order maintenance services, the technician 

will be assumed the physician simply selects "No server" establishes an association between the right rudder and ICD 

using button 325 and the server indicator. 301. To this end, the technician locates the right rudder in the 
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binder and uses reader 323 to read the code. The right rudder 
code is then stored by ICD 301. Next, assuming the puncture 
is particularly dangerous the technical immediately orders 
maintenance to repair or replace the rudder. In addition, the 
technician will want to generate a video clip for archiving so 
that the puncture is documented for subsequent review and 
for use by the person who will repairAeplaoe the mdder. 

To this end, the technician can use button 325 to scroll 
through the possible taiget servers. It is assimied ICD 301 
provides a "Maintenance Server^ choice. The tedmician 
selects the maintenance server as the target server and then 
collects a video clip of the punctured rudder ddn. The 
maintenance server selection causes ICD 301 to generate a 
target address specifying the maintenance server for the 
video clip. Audio information may be provided by the 
technician during the video clip. In addition, date, time, 
rudder information, jet identification and technician identi- 
fication information is added to the video clip for identifying 
a target address and populating fields in an information 
packet. 

After the examination, the technician accesses a terminal 
and downloads all infomiation packets for observation. 
After examining the packet corresponding to the rudder 
puncture (including the clip), the technician approves the 
packet information and transmits the information to the 
maintenance server. Another maintenance technician 
reviews the video clip and other information provided 
therewith. Thereafter, the puncture is repaired or the rudder 
is replaced. 

Where maintenance is required prior to flight, in addition 
to sending the chp to maintenance, the clip and associated 
information may also be earmarked for a clearance server, 
personnel associated therewith grounding all jets which 
require maintenance. In addition, all data collected may be 
achieved in an ardiive server regardless of whether or not 
the archive server is selected by the technician. In yet 
another example which is related to the previous example, 
an ICD similar to ICD 301 may be equipped with a lens 315 
attached to a technician's bead piece or helmet so that 
everything which is viewed by a technical is captured on 
video. Thereafter or, during an examination, the technician 
could earmark certain video clips (e.g. 5-10 seconds) for 
delivery to specific target server addresses while the entire 
video is archived on an archive server. 

Importantly, it should be noted that preferably content is 
provided within generated addresses in the present inven- 
tion. For example, where several facilities share servers, a 
portion of each server may be earmarked for each facility 
and therefore all information units or documents for a 
specific facility should be stored in the corresponding ear- 
marked locations. A portion of each address preferably 
identifies the facifity from which an associated information 
unit originated. Thus, the address is content specific. 

Similarly, for every patient at a facility, preferably, infor- 
mation associated with the patient, is stored at a specific 
location within the portion of a server earmarked for the 
facility. As indicated above patient information is also 
provided in an address. Similar address fields are provided 
for physician information, type of record, time, date, etc so 
that virtually an entire address can specify content. 

This type of content specifying address is not only intua- 
tive but also very useful in that it makes it relatively easy to 
retrieve data and information units from storage. In addition, 
this type of addressing reduces the overall size of an 
information packet and information units as important con- 
tent information can be stored in the address. 
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While a particular emtxxliment of the invention has been 
illustrated and described, it will be obvious to those skilled 
in the art that various changes and modifications may be 
made without sacrificing the advantages provided by the 

5 principle of construction disclosed herein. For example, 
while the invention is generally described in the context of 
HTML, clearly the invention is meant to be used with other 
conventional markii^ languages or with JAVA or JAVA script 
program codes. In addition, while the inventioa is described 

10 as being used with a browser, the invention could be used 
with any terminal ^ich includes software which receives 
formatting codes arid can display information as a function 
of such codes. Moreover, w\nlc it is preferred that full target 
addresses be provided by an ICD 10, clearly minimal 

15 addresses sudi as a coded address could be provided to a 
browser wherein the browser would expand the coded 
minimal address into a full fledged address, the advantage 
being that the ICD specifies where data is to be stored, not 
a browser or associated server. 

20 To apprise the public of the scope of this invention I make 
the following claims: 
I claim: 

1. An apparatus for use with a network system including 
an input device and a network device linked to the input 

25 device, the input: device equipped to receive information 
including information units and network device target 
addresses associated with infonnation imits, the input device 
also capable of transferring the received units to associated 
target addresses, the apparatus for remotely collecting at 

^ least one information unit, correlating the at least one unit 
with at least one target address and providing the informa- 
tion unit and target address to the input device, the apparatus 
comprising: 

a collector for remotely collec^g the at least one infor- 

mation unit; 
a memory; 

a processor linked to the collector for receiving the at least 
one information unit therefirom and also linked to the 
^ memory for providing the information unit thereto and 
accessing information units stored therein, the proces- 
sor also providing a target address for the collected 
infonnation unit; 
an output device linked to the processor for transmitting 
45 the information unit and target address to the input 
device; and 

a clock linked to the processor for identifying the time, 
when collected information is received by the 
processor, the processor identifying an event time and 
50 including the event time in an associated information 
unit 

2. The apparatus of claim 1 wherein information units and 
target addresses are collected and transmitted via wireless 
communication and the collector and output device are both 

55 included in a transceiver which collects and transmits infor- 
mation units. 

3. The apparatus of claim 1 wherein the processor gen- 
erates target addresses for collected information units. 

4. A method for use with a network system including a 
60 remote data collector device, an input device and a network 

device linked to the input device, the collection device 
including a collector, a memory, a processor and an output 
device and for remotely collecting information imits and 
providing the units to the input device, the input device 
65 equipped to receive information including information units 
and network device target addresses associated with infor- 
mation units, the input device also capable of transferring 
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the received units to associated target addresses, the method 
for remotely collecting information and providing the col- 
lected information to target addresses on the network device, 
the method comprising the steps of, using the collection 
device: 

(i) collecting at least one information unit; 

(ii) when the at least one information unit is collected, 
identifying an event time and adding the event time to 
the information unit; 

(iii) providing a target address for the collected informa- 
tion unit; and 

(iv) transmitting the information unit and target address to 
the input device. 

5. The apparatus of claim 1 wherein the apparatus is used 
by a specific user, a user identifier is stored in the memory 
and the processor includes the user identifier in the infor- 
mation unit. 

6. An apparatus for use with a network system including 
an input device and a network device linked to the input 
device, the input device equipped to receive information 
including information units and network device target 
addresses associated with information units, the input device 
also capable of transferring the received units to associated 
target addresses, the apparatus for remotely collecting at 
least one information unit, correlating the at least one unit 
with at least one target address and providing the informa- 
tion unit and target address to the input device, the apparatus 
comprising: 

a collector for remotely collecting the at least one mfor- 

mation unit; 
a memory; 

a processor linked to the collector for receiving the at least 
one information unit therefrom and also linked to the 
memory for providing the information unit thereto and 
accessing information units stored therein, the proces- 
sor also providing a target address for the collected 
information unit; 

an output device linked to the processor for transmitting 
the information unit and target address to the input 
device; 

wherein the apparatus is used to collect a plurality of 
information units, the processor provides a different 
target address for each of the collected information 
units, the output device transfers the collected units and 
associated target addresses to the input device. 

7. The apparatus of claim 1 further including an audio 
sensor and wherein, when audio information is collected, the 
processor forms an information unit therefrom and provides 
a target address therefore for delivery to the input device via 
the output device. 

8. The apparatus of claim 1 further including a video 
sensor and wherein, when video information is collected, the 
processor forms an information unit therefrom and provides 
a target address therefore for delivery to the input device via 
the output device. 

9. An apparatus for use with a network system including 
an input device and a network device linked to the input 
device, the input device equipped to receive information 
including information units and network device target 
addresses associated with information units, the input device 
also capable of transferring the received units to associated 
target addresses, the apparatus for remotely collecting at 
least one inform ation unit, correlating the at least one unit 
with at least one target address and providing the informa- 
tion unit and target address to the input device, the apparatus 
comprising: 
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a collector for remotely collecting the at least one infor- 
mation unit; 
a memory; 

a processor linked to the collector for receiving the at least 
one information unit therefrom and also hoked to the 
memory for providing the information unit thereto and 
accessing information units stored therein, the proces- 
sor also providing a target address for the collected 
information unit; 

an output device linked to the processor for transmitting 
the information unit and target address to the input 
device; and 

at least first and second target address indicating buttons 
linked to the processor, the first button indicating a first 
target address and the second button indicating a sec- 
ond target address and wherein, when the first button is 
selected, the processor correlates the first-target address 
and a collected information unit and when the second 
button is selected the processor correlates the second 
target address and the collected information unit. 

10. The apparatus of claim 1 wherein a browser which 
communicates in a computer language is loaded onto the 
input device and the apparatus formats information units and 
target addresses in the computer language prior to transmit- 
ting to the input device. 

11. The apparatus of claim 10 wherein the computer 
language is a markup language. 

12. The apparatus of claim 1 wherein the network device 
is a memory storage device and the target address specifies 
a specific network device address. 

13. An apparatus for use with a network system including 
an input device and a network memory storage device linked 
to the input device, the input device equipped to receive 
information including information units and network device 
target addresses associated with information units, the input 
device also capable of transferring the received units to 
associated target addresses, the apparatus for remotely col- 
lecting at least one information unit, correlating the at least 
one unit with at least one target address and providing the 
information unit and target address to the input device, the 
apparatus comprising: 

a collector for remotely collecting the at least one infor- 
mation unit; 
a memory; 

a processor linked to the collector for receiving the at least 
one information unit therefrom and also linked to the 
memory for providing the information unit thereto and 
accessing information units stored therein, the proces- 
sor also providing a specific network device target 
address for the collected information unit; 

an output device linked to the processor for transmitting 
the information unit and target address to the input 
device; and 

wherein the memory storage device includes several 
network servers, the input device is capable of receiv- 
ing more than one target address for each information 
unit and storing an information unit at more than one 
target address, and the processor is capable of corre- 
lating an information unit with more than one target 
address and transmitting more than one target address 
for each information unit. 

14. The apparatus of claim 1 wherein the input device 
includes a display and a browser is loaded onto the input 
device and is capable, when a display format is provided, of 
displaying information on the display, the processor further 
providing a display format for each information unit. 
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15. The apparatus of claim 14 wherein the processor 
provides display formats which specify browser ioteractioD 
tools, the interaction tools useable by a system user to 
modify or approve information displayed on the display. 

16. The apparattis of claim 15 wherein the interaction 
tools include icons and pull down windows. 

17. A network system for information gathering, storage 
and retrieval, the system including: 

(a) a collection device comprising: 

(i) a collector for remotely collecting at least one 
information unit; 

(ii) a memory; 

(iii) a processor linked to the collector for receiving the 
at least one information unit therefrom and also 
linked to the memory for providing the information 
unit thereto and accessing information units stored 
therein, the processor also providing a network 
device target address for the collected information 
unit; and 

(iv) an output device linked to the processor for trans- 
mitting the information unit and target address; 

(b) a network device; 

(c) an input device equipped to receive transmitted infor- 
mation units and associated target addresses, the input 
device also capable of transferring the received units to 
associated network device target addresses; and 

a specifier apparatus which provides a target address for 
information to be collected by the collection device 
wherein, the collector receives the target address, the 
processor stores the target address and, when an infor- 
mation imit is later collected, the processor correlates 
the collected information unit and the target address for 
transmission to the input device. 

18. A method for information gathering, transmission and 
retrieval and for use with a system including a collection 
device, an input device and a network device linked to the 
input device, the method also for use with a specifier 
apparatus which provides a target address for information to 
be collected by the collection device, the method comprising 
the steps of: 

using the specifier apparatus, providing a target address to 
the collection device; 

(a) using the data collection device for: 

(i) storing the target address; 

(ii) remotely collecting at least one information unit; 

(iii) correlating the collected information unit and the 
target address for transmission to the input device; 
and 

(iv) transmitting the information unit and target address 
to an input device; 

(b) when the input device receives information units and 
associated addresses, transferring the received units to 
associated target addresses. 

19. The system of claim 17 wherein an information packet 
includes at least an information unit and a target address and 
the system input device can receive the information packet 
and identify each of the information unit and the target 
address and wherein, prior to transmitting the information 
unit and the target address, the processor combines the 
information unit and the target address forming an informa- 
tion packet and the output device transmits the itiformalion 
packet to the input device. 

20. The system of claim 17 further including a specifier 
apparatus which provides both an information unit and an 
associated target address as an information packet to be 
collected by the collection device wherein, the collector 
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receives the information packet, the processor stores the 
information packet and, when the input device receives the 
information packet, the input device identifies the informa- 
tion unit and the target address and transmits the information 
unit to the target address. 

21. The system of claim 20 wherein the specifier appa- 
ratus includes a plurality of specifier apparatuses, each 
specifier apparatus providing a separate information packet, 
the collector receiving each information packet, the proces- 
sor storing each information packet and, when the input 
device receives the each information packet, the input device 
transmits the information unit in each packet to an associ- 
ated target address. 

22. The system of claim 17 wherein the collection device 
is used by a specific user, a user identifier is stored in the 
memory and the processor includes the user identifier in the 
information unit. 

23. The system of claim 17 wherein the input device is 
also equipped to interrogate a user and only allows vaHd 
system tiscrs to transmit information units thereto. 

24. The system of claim 17 wherein a browser which 
communicates in a computer language is loaded onto the 
input device and the collection device formats information 
units and target addresses in the computer language prior to 
transmitting to the input device. 

25. The system of claim 17 wherein the network device is 
a memory storage device. 

26. The system of claim 25 wherein the memory storage 
device includes several network servers and the processor 
provides target addresses which specify addresses on at least 
one of the servers. 

27. An apparatus for use with a remote data collection 
device and a network system, the system including an input 
device and a network device, the input device equipped for 
receiving and transmitting information units to network 
device addresses, the collection device for remotely collect- 
ing information units and providing the information units 
and associated network device target addresses to the input 
device wherein the target addresses indicate where collected 
information is to be transmitted, the apparatus for providing 
target addresses to the collection device, the collection 
device including a collector, the apparatus comprising: 

a processor including an address specifier indicating a 
target address for collected information; and 

a specifier transmitter linked to the processor for trans- 
ferring the target address to the collector. 

28. The apparatus of claim 27 wherein the network device 
is a memory storage device, the processor is linked to the 
memory storage device and, when an information unit is 
stored at a memory storage device target address, the pro- 
cessor identifies that the information unit has been stored. 

29. The apparatus of claim 28 further including an indi- 
cator and a timer and wherein an event associated with an 
information unit is to occur within a specific time period and 
the processor monitors the specific lime periods and, 
wherein, when a time period expires prior to an information 
unit associated with the event being stored, the processor 
indicates that the event did not occur within the specific time 
period via the indicator. 

30. The apparatus of claim 29 wherein the indicator is an 
alarm. 

31. The apparatus of claim 27 wherein the apparatus is a 
first apparatus in a system which includes other apparatus 
and the information unit is received from one of the other 
apparatuses. 

32. The apparatus of claim 27 wherein the apparatus also 
provides the collected information unit and the processor 
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correlates the information unit with the target address form- 
ing an iaformatioD packet and the output device transfers the 
information packet to the collection device. 

33. The apparatus of claim 27 wherein the input device 
includes a display and a browser is loaded oato the input $ 
device and is capable, when a display format is provided, of 
displayiog information on the display, the processor further 
providing a display format for each information unit. 

34. The apparatus of claim 33 wherein the processor 
provides display formats which specify browser interaction 
tools, the interaction tools useable by a system user to 
modify or approve information displayed on the display. 

35. The apparatus of claim 34 wherein the interaction 
tools include icons and pull down windows. 

36. The apparatus of daim 27 wherein the apparams is 
capable of providing more than one target address for a 
single information unit. 

37. The apparatus of claim 27 wherein the input device 
and collection device communicate in a computer language 
and the output device provides the target addresses in the 
computer language. ^ 

38. The method of claim 5 wherein the collection device 
is used by a specific user and, prior to transmitting, the 
method includes the step of adding a user identifier to the 
information unit. 

39. A method for use with a network system including a 
remote data collection device, an input device and a network 
device linked to the input device, the collection device 
including a collector, a memory, a processor and an output 
device and for remotely collecting information units and 
providing the units to the input device, the input device 
equipped to receive information including information units 
and network device target addresses associated with infor- 
mation units, the input device also capable of transferring 
the received units to associated target addresses, the method 
for remotely collecting information and providing the col- 
lected information to target addresses on the network device, 
the method comprising the steps of, using the collection 
device: 

(i) collecting at least one information unit; 

(ii) providing a target address for the collected informa- 
tion unit; 

(iii) transmitting the information unit and target address to 
the input device; and 

wherein the method is used to collect a plurality of 45 
information units and the method further includes the 
steps of providing a separate target address for each of 
the collected information units and transferring the 
collected units , and associated target addresses to the 
input device. 50 

40. A method for use with a network system including a 
remote data collection device, an input device and a network 
device linked to the input device, the collection device 
including a collector, a memory, a processor and an output 
device and for remotely collecting information units and 55 
providing the units to the input device, the input device 
equipped to receive information including information units 
and network device target addresses associated with infor- 
mation units, the input device also capable of transferring 
the received units to associated target addresses, the method 
for remotely collecting information and providing the col- 
lected information to target addresses on the network device, 
the method comprising the steps of, using the collection 
device: 

(i) collecting at least one information unit; ^5 

(ii) providing a target address for the collected informa- 
tion unit; and 
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(iii) transmitting the information unit and target address to 
the input device; and 

wherein the collection device further includes at least first 
and second target address indicating buttons linked to 
the processor, the first button indicating a first target 
address and the second button indicating a second 
target address and wherein the method includes the 
steps of, when the first button is selected, correlating 
the first target address and a collected information unit 
and when the second button is selected correlating the 
second tai^get address and the collected information 
unit. 

41. The method of claim 4 wherein a browser which 
communicates in a computer language is loaded onto the 
input device and the method formats information units and 
target addresses in the computer language prior to transmit- 
ting to the input device. 

42. The method of claim 41 wherein the computer lan- 
guage is a markup language. 

43. The method of claim 4 wherein the network device is 
a memory storage device and the target address specifies a 
specific network device address. 

44. The method of claim 4 wherein die input device 
includes a display and a browser is loaded onto the input 
device and is capable, when a display format is provided, of 
displaying information on the display, the method further 
including the step of providing a display format for each 
information unit and transmitting the display format with the 
information unit to the input device. 

45. The method of claim 44 wherein the step of providing 
display formats includes providing display formats which 
specify browser interaction tools, the interaction tools use- 
able by a system user to modify or approve information 
displayed on the display. 

46. The method of claim 45 wherein the interaction tools 
include icons and pull down windows. 

47. The method of claim 18 wherein an information 
packet includes at least an information unit and a target 
address and the input device can receive the information 
packet and identify each of the information unit and the 
target address and wherein, prior to transmitting the infor- 
mation unit and the target address, the step of correlating 
includes the step of combining the information unit and the 
associated target address to form an information packet and 
the step of transmitting includes the step of transmitting the 
information packet to the input device. 

48. The method of claim 18 further including a specifier 
apparatus which provides both an information unit and an 
associated target address as an information packet to be 
collected by the collection device wherein, the method 
including the steps of, using the specifier apparatus, provid- 
ing an information packet to the collection device, using the 
collection device, storing the information packet and there- 
after transmitting the information packet to the input device 
and, using the input device transferring the information unit 
to the target address. 

49. The method of claim 18 wherein the collection device 
is used by a specific user and the method includes the step 
of, using the collection device and after the step of 
collecting, including the user identifier in the information 
unit. 

50. The method of claim 18 further including the step of, 
prior to transmitting, interrogating the ICD to determine if 
an ICD user is a valid system user and only allowing 
transmission if the tiser is a valid user. 

51. The method of claim 18 wherein a browser which 
communicates in a computer language is loaded onto the 
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input device and the method includes the step of, using the 
collection device, formatting the information units and tar- 
get addresses in the computer language prior to transmitting 
to the input device. 

52. The method of claim 18 wherein the system also 
includes a display and wherein the method further includes 
the step of, prior to transmitting an information unit and after 
an information unit is received, displaying at least a portion 
of the information unit information on the display for 
acceptance by a user. 

53. The method of claim 52 further including the step of, 
during displaying, allowing a user to modify the displayed 
information unit information or accept the information unit 
information. 

54. The method of claim 18 further including the steps of 
providing a user identifier to the input device and modifying 
the information unit by adding a user identifier to the unit 
prior to transmitting the information unit. 

55. The method of claim 18 wherein the system also 
includes a temporary storage device and wherein the method 
further includes the steps of, when information units and 
associated target addresses are received by the input device, 
storing the units and addresses on the temporary storage 
device and providing a user the option to review the stored 
units at a subsequent time. 

56. Amethod for use with a remote data collection device, 
a network system and a specifier apparatus, the system 
including an input device and a network device, the input 
device equipped for receiving and transmitting information 
units to network device addresses, the collection device for 
remotely collecting information units and providing the 
information units and associated network device target 
addresses to the input device wherein the target addresses 
indicate where collected information is to be transmitted, the 
method for providing target addresses to the collection 
device, the collection device including a collector, the 
method comprising the steps of, using the specifier appara- 
tus: 

identifying an address specifier indicating a target address 
for information to be subsequently collected; and 

transferring the target address to the collector for storage 
by the collection device. 
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57. The method of claim 56 wherein the network device 
is a memory storage device, the specifier apparatus is linked 
to the memory storage device and the method further 
includes the step of, when an information unit is stored at a 
memory storage device target address, identifying that the 
information unit has been stored. 

58. The method of claim 57 wherein the specifier appa- 
ratus includes an indicator and a timer and wherein an event 
associated with an information imit is to occur within a 
specific time period and the method further includes the 
steps of, using the specifier device, monitoring the specific 
time periods and, wherein, when a time period expires prior 
to an information unit associated with the event being stored, 
indicating that the event did not occur within the specific 
time period via the indicator. 

59. The method of claim 56 wherein the specifier appa- 
ratus is a first apparatus in the system and the system 
includes other specifier apparatus and the method includes 
the step of, after transferring the target address to the 
collector, transferring an information unit form another of 
the specifier apparatuses. 

60. The mettiod of claim 56 wherein the method also 
provides the collected information unit and the method 
includes the step of, prior to transferring, correlating the 
information unit with the target address forming an infor- 
mation packet and the step of transferring includes transfer- 
ring the information packet to the collection device. 

61. The method of claim 56 wherein the input device 
includes a display and a browser is loaded onto the input 
device and is capable, when a display format is provided, of 
displaying information on the display, the method further 
including the steps of, prior to transferring, providing a 
display format for each information unit. 

62. The method of claim 57 wherein the step of providing 
display formats includes the step of providing display for- 
mats which specify browser interaction tools, the interaction 
tools useable by a system user to modify or approve infor- 
mation displayed on the display. 

63. The method of claim 57 wherein the input device and 
collection device communicate in a computer language and 
the specifier apparatus provides the target addresses in the 
computer language. 



05/20/2004, EAST Version: 1.4.1 



